PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Extending Emuroot: support for Android 10 & 11

blog.quarkslab.com | research | #android | #reverse-engineering | #emulator | #root | #qemu | #emuroot
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The post covers extending Emuroot, a Python script that gains root on Android emulators (AVDs) via QEMU's GDB stub, to support Android 10 and 11, including the kernel structures targeted.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · eshard.com
Android graphical stack and qemu virtualization
Software Security ### Power your investigations with esReverse ✨ Keep your data safe with private LLM. PLATFORM esReverse AI-powered Reverse Engineering TOOLS Time Travel Debugging Epoch SERVICES...
research · blog.quarkslab.com
Linux kernel instrumentation from Qemu and Gdb
A tutorial on instrumenting the Linux kernel from QEMU and GDB: using a hypervisor for stealthy analysis, plus GDB scripting and kernel helper tools to monitor syscalls, processes and modules.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
research · eshard.com
Can AI bring Mobile Application Security Analysis in-house?
Can AI bring mobile app security analysis in-house? See how Epoch's time travel traces and an AI agent test an Android app against OWASP MASVS.
Back