CVE-2020-0096

This repository contains a proof-of-concept exploit for CVE-2020-0096 (StrandHogg 2.0), demonstrating how an attacker can overlay malicious activities on top of legitimate apps by manipulating task affinity and intent flags. The PoC includes Android activities that exploit the vulnerability to hijack user interactions.

This repository contains a proof-of-concept exploit for CVE-2020-0096 (StrandHogg2), demonstrating a local privilege escalation vulnerability in Android's ActivityStartController. The exploit manipulates task affinity to hijack legitimate app activities.

This PoC demonstrates the StrandHogg vulnerability (CVE-2020-0096) by hijacking a target Android app's task via malicious intent manipulation. It exploits Android's task affinity to overlay malicious activities, potentially leading to credential theft or phishing.