CVE-2020-7384
HIGHMetasploit < 4.19.0 - Command Injection via Malicious APK File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2020-7384.
PoCs published by Justin Steven, nikhil1232, CarsonShaffer, including Metasploit module exploits/unix/fileformat/metasploit_msfvenom_apk_template_cmd_injection.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Metasploit's msfvenom APK template generation by embedding a malicious payload in the -dname parameter of a signing key. The payload is executed when the APK is processed by msfvenom.
Description
Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine.
Exploits (4)
This exploit leverages a command injection vulnerability in Metasploit's msfvenom APK template generation by embedding a malicious payload in the -dname parameter of a signing key. The payload is executed when the APK is processed by msfvenom.
This repository contains a functional exploit for CVE-2020-7384, which leverages a command injection vulnerability in the APK signing process. The script generates a malicious APK file with a crafted keystore -dname field that executes a reverse shell payload when processed by vulnerable software.
This repository contains a functional exploit script for CVE-2020-7384, which leverages a command injection vulnerability in the APK signing process. The script generates a malicious APK file with a crafted distinguished name (dname) that executes a reverse shell payload when processed by a vulnerable system.
This exploit leverages a command injection vulnerability in Metasploit Framework's msfvenom when processing a crafted APK template. The payload is embedded in the X.509 certificate's Common Name (CN) field, which is executed when the victim uses msfvenom to generate an APK payload.
References (3)
Scores
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H