The ActivityManagerService (https://androidreverse.wordpress.com/2018/03/11/aosp-activitymanager-and-activitymanagerservice/) is a component of Android that manages the Running Applications, non-system Services, ContentProviders and much more. The StartFlag DoS Exploit sends a manipulated startActivity event telling to start another Application in "native debugging" mode (in our Test we use the PermissionGrant Activtiy wich is marked as not debuggable". A bug in the ActivityManagerService doesn't answer with forwarding a SecurityException to the Attacker, instead it throws the SecurityException without catching it. This causes the ActivityManagerService to crash and all other Services depending on it also die.

Project Samples

Project Activity

See All Activity >

Follow StartFlagExploit

StartFlagExploit Web Site

Other Useful Business Software
Save Up to 91% on Cloud Compute With Spot VMs Icon
Save Up to 91% on Cloud Compute With Spot VMs

Automatic sustained-use discounts. One free VM per month. No negotiation needed.

Run batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
Try Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of StartFlagExploit!

Additional Project Details

Operating Systems

Android

Programming Language

Kotlin

Registered

2020-05-04