Land rapid7#7454, add CVE-2013-6282, put_user/get_user exploit for Android

Author: Brent Cook

data/exploits/CVE-2013-6282.so

@@ -0,0 +1,21 @@
+LOCAL_PATH := $(call my-dir)
+
+include $(CLEAR_VARS)
+
+#LOCAL_LDFLAGS   += -llog
+#LOCAL_CFLAGS    += -DDEBUG
+LOCAL_MODULE    := exploit
+LOCAL_SRC_FILES := exploit.c
+
+include $(BUILD_SHARED_LIBRARY)
+
+include $(CLEAR_VARS)
+
+LOCAL_LDFLAGS   += -llog
+LOCAL_CFLAGS    += -DDEBUG
+LOCAL_MODULE    := debugexploit
+LOCAL_SRC_FILES := exploit.c
+
+include $(BUILD_EXECUTABLE)
+
+

external/source/exploits/CVE-2013-6282/Android.mk

@@ -0,0 +1,20 @@
+
+all: install
+
+build:
+	ndk-build NDK_PROJECT_PATH=. APP_BUILD_SCRIPT=./Android.mk APP_PLATFORM=android-16 APP_ABI=armeabi
+
+install: build
+	mv libs/armeabi/libexploit.so ../../../../data/exploits/CVE-2013-6282.so
+
+push: build
+	adb push libs/armeabi/debugexploit /data/local/tmp/exploit
+
+run: push
+	adb shell 'chmod 777 /data/local/tmp/exploit'
+	adb shell '/data/local/tmp/exploit'
+
+clean:
+	rm -rf libs
+	rm -rf obj
+

external/source/exploits/CVE-2013-6282/Makefile

@@ -0,0 +1,11 @@
+
+BUILDING:
+
+Download the android ndk, e.g:
+https://dl.google.com/android/repository/android-ndk-r10e-linux-x86_64.zip
+(I used android-ndk-10d)
+
+Unzip it and install ensure ndk-build is in your PATH
+
+make
+