CVE-2020-7384

This exploit leverages a command injection vulnerability in Metasploit's msfvenom APK template generation by embedding a malicious payload in the -dname parameter of a signing key. The payload is executed when the APK is processed by msfvenom.

This repository contains a functional exploit for CVE-2020-7384, which leverages a command injection vulnerability in the APK signing process. The script generates a malicious APK file with a crafted keystore -dname field that executes a reverse shell payload when processed by vulnerable software.

This repository contains a functional exploit script for CVE-2020-7384, which leverages a command injection vulnerability in the APK signing process. The script generates a malicious APK file with a crafted distinguished name (dname) that executes a reverse shell payload when processed by a vulnerable system.

This exploit leverages a command injection vulnerability in Metasploit Framework's msfvenom when processing a crafted APK template. The payload is embedded in the X.509 certificate's Common Name (CN) field, which is executed when the victim uses msfvenom to generate an APK payload.