Android Directory Traversal Vulnerable App & Exploit

Original Stream

This demonstration of an insecure ContentProvider was inspired by the first bug I ever found. The vulnerable app exports an insecure ContentProvider that allows a malicious application to read files from the private, internal storage.