Root Bridge – Android devices get pwned

guest · Jun 8, 2018

Root Bridge — how thousands of internet connected Android devices now have no security, and are being exploited by criminals.
June 8, 2018
https://doublepulsar.com/root-bridg...ces-now-have-no-security-and-are-b46a68cb0f20

Android has a feature called Android Debug Bridge (ADB for short) which allows developers to communicate with a device remotely, to execute commands and fully control the device.
It is completely unauthenticated, meaning anybody can connect to a device running ADB to execute commands. However, to enable it — in theory — you have to physically connect to a device using USB and first enable the Debug Bridge.

Unfortunately, vendors have been shipping products with Android Debug Bridge enabled. It listens on port 5555, and enables anybody to connect over the internet to a device.
This is highly problematic as it allows anybody — without any password — to remotely access these devices as ‘root’* — the administrator mode — and then silently install software and execute malicious functions.

*in theory root shouldn’t be available in non-Development builds, but there’s an apparent bypass – adb shell “su -c command”
[...]
Summing up, vendors need to not ship products with Android Debug Bridge enabled over a network — especially when they are designed for internet connectivity. It creates a Root Bridge — a situation every anybody can misuse devices.
Click to expand...

Log in or Sign up

Root Bridge – Android devices get pwned

guest Guest

Log in or Sign up

Root Bridge – Android devices get pwned

guest Guest

Useful Searches