How to gain Root Access Android Phone ?

By Anonymous -
Millions of Android devices could be hacked exploiting a plugin that comes pre-installed on your Android devices by the manufacturers.


Most of the Android device manufacturers pre-install ‘Remote Support Tool (mRST)’ plugin onto their phones that are intended to help users, such as RSupport or TeamViewer.

But, a critical Certifi-Gate security vulnerability in this mRTS plugin allows malicious applications to gain illegitimate privileged access rights, even if your device is not rooted.
"Certifi-Gate" Android security vulnerability

According to Israeli researchers at Check Point, Ohad Bobrov and Avi Bashan, Certifi-Gate Android vulnerability lies in the way Google’s partners (manufacturers) use certificates to sign remote support tools.

Remote support tools often have root level access to Android devices, even if your device is not rooted. Thus any installed app can use Certifi-Gate vulnerability to gain unrestricted device access, including:
  • screen scraping
  • keylogging
  • exfiltrating private information
  • installing malware apps, and more

“While analyzing and classifying mRATs, our research team found some apps share common traits with mRST. Known mRAT players include HackingTeam, mSpy, and SpyBubble.”

Video Demonstration:

Android Smartphones and tablets running the latest version of Android (Lollipop) are also at risk.





Am I vulnerable to Certifi-Gate vulnerability?


Checkpoint released an app that detects if your Android device is vulnerable to the Certifi-Gate exploits and also reveals if any attacks have already been launched on the user’s phone.

The annoying news is that the vulnerability may not go away anytime soon, because Android phone manufacturer companies are notoriously slow in releasing patches to users.
#androidhackingagain#certifigate#vulnerability#plugin#remotesupporttool
#hacking#hackingandroid

Comments

Post a Comment

Popular posts from this blog

How to hack your xbox 360 completely

By Anonymous -
Image
So you want to hack your 360. Have no idea where to start? This thread should give you a general idea on what you can do with your 360. Lets get started. First of all you'll need to determine the age of your console. This will give you a general idea of what hack you can apply. On the back of the 360 there is a sticker near the AV port (Phat*&Slim*) On that you'll find the MFR date as well as the Console Serial and Product ID. Determining the age of the 360 ​ ​ You'll need to write down your MFR date. This will roughly tell you what board you have in your 360. Xenon: 2005 - 2007 203w power supply, can be JTAGged and RGH'd (14699 only) & R-JTAGged. Zephyr: 2007 - 2008 203w power supply, can be JTAGged and RGH'd (Hard to achieve) & R-JTAGged. Opus: Only from RRoD Repairs from MS (rare revisions) 203/175w power supply, can be JTAGged and RGH'd & R-JTAGged. Falcon: 2007 - 2009 175w power supply, can be JTAGged and
Read more

Autonomous mobile additive manufacturing robot runs circles around traditional 3D printers

By Anonymous -
Image
3D printing is revolutionizing the way objects are created, from plastic toys to ceramic dental crowns. But the seemingly boundless possibilities of 3D printing technology have one major limitation—the printers themselves, which are large, bulky, and stationary. Robert Flitsch didn’t like being constrained by the boxy shape of the 3D printer he used while he was a student at the Harvard John A. Paulson School of Engineering and Applied Sciences. So this mechanical engineering concentrator developed a wheeled additive manufacturing machine that can literally run (or drive) circles around a traditional 3D printer. He recently launched a startup named Addibots (a  portmanteau  of additive manufacturing and robots), to develop and market his mobile 3D printing robots. “By making the additive manufacturing components completely mobile, you break free of all the workspace limitations of 3D printing,” Flitsch said. “But Addibots also greatly opens the field to many new application space
Read more

The power of Bluetooth 4.0

By -
Image
Bluetooth, once trumpeted as the ultimate convenience, quickly proved a headache with plenty of pairing problems and inexplicable connection snafus. Bluetooth 4.0, the newest version of the technology, is about to change all that. The bad Bluetooth rep I personally use Bluetooth daily, and love it. My trusty   LG BHS-700s   works like a charm. For others, however, living with this technology can be frustrating. Often users are asked to enter annoying passwords before linking devices, and sudden reception drops or other software glitches make Bluetooth feel more painful than fun. Honestly I believe the bad old days of Bluetooth are behind us, especially with Bluetooth 4.0, AKA   Bluetooth Smart Ready , on the edge of mass adoption. Already available in the   Motorola Droid Razr   and   Droid Razr Maxx   smartphones plus Apple's   iPhone 4S , Bluetooth 4.0 is expected to hit more handsets and all manner of accessories this year. High-end handsets such as the Motorola Droid Razr
Read more