Demonstration of a StrandHogg attack via the task switcher

Overview

StrandHogg attack recents

Strandhogg recents attack in action

App under attack

  • android:launchMode="singleTask"

Attacker app

  • android:launchMode="singleTask"
  • android:taskAffinity="com.example.appunderattack"
  • android:excludeFromRecents="true"
  • moveTaskToBack(true)

Reproduction case

  1. Device running Android 10 or lower
  2. Open App under attack via icon
  3. Press Android home button
  4. Open Attacker app (nothing shown)
  5. Open task switcher and select App under attack from recents
  6. Attacker app displays activity on top
You might also like...
Task Timer - An android app that helps you to keep a track of how much time you spend on each task
Task Timer - An android app that helps you to keep a track of how much time you spend on each task

Task Timer - An android app that helps you to keep a track of how much time you spend on each task

This SDK can be used to identify a user via passport or ID Card prove identity of user via Biometry comparing selfie and photo from chip of ID Doc
This SDK can be used to identify a user via passport or ID Card prove identity of user via Biometry comparing selfie and photo from chip of ID Doc

Verdi Mobile SDK This SDK can be used to identify a user via passport or Id Card. In this repository, you can find the library itself and the Sample a

This SDK can be used to identify a user via passport or ID Card prove identity of user via Biometry comparing selfie and photo from chip of ID Doc Demonstration of calling requestFocusFromTouch() in WebView is changing colors in Android app
Demonstration of calling requestFocusFromTouch() in WebView is changing colors in Android app

webview-changing-colors-bug Demonstration of calling requestFocusFromTouch() in WebView is changing colors in Android app This is the problematic code

This is a template repository intended to get a quick up and running project for demonstration purposes.

Android App Template This is a GitHub template repository intended to kickstart development on an Android application. This project comes set with a h

A demonstration on how to Create Multiple ViewType RecyclerView

Multiple_View_Recyclerview The app fetches a damy data from an API to display on different view on Clients side A demonstration on how to Create Multi

A demonstration of Kotlin-logging with logback.

try-kotlin-logging A demonstration of Kotlin-logging with logback. Usage # output a log to STDOUT and file(myApp.log) $ ./gradlew run # = 2021-12-11

Slow-kotest - Demonstration that kotest is very slow during test instantiation

This project demostrates the slow start time for simple kotest unit tests. the c

Microservice-grpc-multi-language-example - gRPC communication on multiple language demonstration (spring kotlin, go, .NET core 6) Demonstration of an issue trying to render a preview in Jetpack Compose without the activity artifact.
Demonstration of an issue trying to render a preview in Jetpack Compose without the activity artifact.

Demonstration of an issue trying to render a preview in Jetpack Compose without the activity artifact.

👨‍💻 A demonstration modern Android development project with Jetpack(Compose, Room, ViewModel, Navigation), Hilt and based on MVVM by using Open Sky API. ✈️ 🌍
👨‍💻 A demonstration modern Android development project with Jetpack(Compose, Room, ViewModel, Navigation), Hilt and based on MVVM by using Open Sky API. ✈️ 🌍

A demonstration modern Android development project with Jetpack(Compose, Room, ViewModel, Navigation), Hilt and based on MVVM by using Open Sky API.

A demonstration modern Android development project with Jetpack(Compose, Room, Flow, ViewModel, Navigation), Hilt and based on MVVM by using Github API.
A demonstration modern Android development project with Jetpack(Compose, Room, Flow, ViewModel, Navigation), Hilt and based on MVVM by using Github API.

A demonstration modern Android development project with Jetpack(Compose, Room, ViewModel, Navigation), Hilt and based on MVVM by using Github API.

Demonstration of Object Pool Design Pattern using Kotlin language and Coroutine
Demonstration of Object Pool Design Pattern using Kotlin language and Coroutine

Object Pool Design Pattern with Kotlin Demonstration of Thread Safe Object Pool Design Pattern using Kotlin language and Coroutine. Abstract The objec

An e-commercial application built as a technological demonstration.
An e-commercial application built as a technological demonstration.

Overview An e-commercial application built as a technological demonstration. The purpose of this app is to get an experience from creatinig architectu

A demonstration of source code transformation to implement automatic differentiation, compatible with an operation overload style AD library DiffKt.
A demonstration of source code transformation to implement automatic differentiation, compatible with an operation overload style AD library DiffKt.

AdOptimize Kotlin Plugin AdOptimize is a Kotlin compiler plugin that can transform functions written using an operation overload automatic differentia

An Android percentage chart that displays the progress of any single given task or information.
An Android percentage chart that displays the progress of any single given task or information.

Percentage Chart View A Java-based easy to use and highly adjustable custom view that displays the progress of a single given task. Please feel free t

Gradle plugin adding a task to run a Paper Minecraft server

Run Paper Run Paper is a Gradle plugin which adds a task to automatically download and run a Paper Minecraft server along with your plugin built by Gr

Take beautiful markdown notes and stay organized with task lists.
Take beautiful markdown notes and stay organized with task lists.

Take beautiful markdown notes whenever you feel inspired. Place them in notebooks and tag them accordingly. Stay organized by making task lists, set reminders and keep everything in one place by attaching related files.

A small application for working with the Github API, made as a practical task. GeekBrains, course of study: Popular libraries: RxJava 2, Dagger 2, Moxie.
A small application for working with the Github API, made as a practical task. GeekBrains, course of study: Popular libraries: RxJava 2, Dagger 2, Moxie.

GeekBrains_Course_AndroidOnKotlin_HW_My_Movie Домашнее задание к занятию №2-6 Студента GeekBrains Веремеенко Дмитрия Факультет: Android-разработки Кур

Owner
Jeroen Mols
Jeroen Mols
A demonstration on how to Create Multiple ViewType RecyclerView

Multiple_View_Recyclerview The app fetches a damy data from an API to display on different view on Clients side A demonstration on how to Create Multi

Mohamed Dekow 1 Nov 18, 2021
👨‍💻 A demonstration modern Android development project with Jetpack(Compose, Room, ViewModel, Navigation), Hilt and based on MVVM by using Open Sky API. ✈️ 🌍

A demonstration modern Android development project with Jetpack(Compose, Room, ViewModel, Navigation), Hilt and based on MVVM by using Open Sky API.

Ismail Oguzhan Ay 13 Dec 4, 2022
A demonstration modern Android development project with Jetpack(Compose, Room, Flow, ViewModel, Navigation), Hilt and based on MVVM by using Github API.

A demonstration modern Android development project with Jetpack(Compose, Room, ViewModel, Navigation), Hilt and based on MVVM by using Github API.

Murat 2 Apr 11, 2022
Deletes other specs before the compileGroovy gradle task

run-groovy-spec-faster Template ToDo list Create a new IntelliJ Platform Plugin Template project. Get familiar with the template documentation. Verify

null 0 Nov 27, 2021
A Basic Drawing App which is having Functionality of importing images from your gallery and sharing your drawing via Whatsapp , Email

Drawing-App A Basic Drawing App made in Kotlin Features of the App :) 1.you can set the size of paint Brush 2.import images from gallery 3.share it vi

MaNiSh 1 Jan 18, 2022
Android StrandHogg Task Injection POC

Android StrandHogg Task Injection POC This project demonstrates how StrandHogg task injection works.

Arsalan Diponegoro 9 Dec 14, 2022
A Simple Todo app design in Flutter to keep track of your task on daily basis. Its build on BLoC Pattern. You can add a project, labels, and due-date to your task also you can sort your task on the basis of project, label, and dates

WhatTodo Life can feel overwhelming. But it doesn’t have to. A Simple To-do app design in flutter to keep track of your task on daily basis. You can a

Burhanuddin Rashid 1k Jan 1, 2023
An instance-state saving fragment switcher, intended for use with navigation drawers or tabs.

FragmentSwitcher FragmentSwitcher is an adapter-based, state-saving fragment container similar to a ViewPager. It was designed with the NavigationDraw

Jacob Tabak 247 Dec 30, 2022
Minimal example of how to safely share a file produced by a task in one project, with a task in another project.

How to share files across Gradle subprojects: A minimal example This is the Gradle project: . ├── producer │ └── build.gradle.kts ├── consumer │ └

Rob Moore 2 Dec 17, 2021
Flixbus-task - Android Coding Task from FlixBus

FlixBus Coding Task Features Fetch timetables from FlixBus service Show fetched

Ali Ansari 0 Jan 23, 2022