⭕️ RCE on Xiaomi 13 Pro (CVE-2023-26324)
👉Exploitation:
1) Open URL in WebView
2) Inject JavaScript
3) Execute JavaScript Interface functions from vulnerable GetApps to install & launch payload
4) Get shell
📎 Slides with PoC: DL-Link
#Android
@Securation
Post #1761
8.44K
