diabl0w

Results 43 comments of diabl0w

following this feature request... adding this and the apk compile/decompile feature would make this app the true ultimate swiss army knife of android app management

> We've discussed something similar in #922. Usability of such feature is still being investigated. Ah yes, I apologize I missed that. It should be much easier now that an...

> Exploiting this vulnerability only requires a native library and an old version of the SMT app. That's all. So, this SMTShell app is a helper app rather than a...

@MuntashirAkon ["The best way for users to protect themselves is to set up this exploit and use it themselves. Once you do, no other user can load a second library...

> SMTShell, it appears, has several issues. The most prominent is that it only allows execution of one shell command at a time. The command used by App Manager will...

> Possibly found the issue: > > ``` > SamsungTTS com.samsung.SMT E LangPackMgr() - Failed startService[com.samsung.SMT.lang.smtshell] : Not allowed to start service Intent { act=com.samsung.SMT.lang.smtshell pkg=com.samsung.SMT.lang.smtshell }: app is in...

> There's also this weird issue: The system seems to detect App Manager running in UID 1000 instead of its own which creates a new set of problems. Is there...

> Sure. https://github.com/MuntashirAkon/AppManager/tree/smtshell-api Thank you! I will work on this later today When you say invoked manually, you are just saying manually opening a reverse shell because it doesnt work...

> > When you say invoked manually, you are just saying manually opening a reverse shell because it doesnt work in-app? > > Yes. I attempted to run the command...

@MuntashirAkon just a quick preliminary look... I am getting: ``` 06-16 00:11:53.638 1266 1559 W BroadcastQueue: Permission Denial: broadcasting Intent { act=smtshell.intent.action.SHELL_COMMAND flg=0x10 pkg=com.samsung.SMT (has extras) } from io.github.muntashirakon.AppManager.debug (pid=8587,...