Finding and exploiting a bug (LPE) in an old Android phone (Part 1/2)
Channel: gamozolabs
Date: 2020-11-12

In this video we find and write an exploit for a bug in an old Android phone, a Motorola Electrify, running Android 2.3.5.


00:00:00 - Picking a phone to exploit

01:51:10 - Finding an original signed firmware to factory reset the phone to
02:24:50 - Building a Rust toolchain for the phone so that we can write exploits in Rust!
03:10:10 - Trying to get a valid flashing environment for this ancient device
04:46:55 - Flashing it
04:52:00 - Finding a bug
05:28:55 - Testing a bug
05:49:05 - First kernel panic
06:25:25 - "Maybe we just go find a different bug, that one is kinda hard?"
06:35:55 - Writing an exploit for the new bug
07:05:50 - Kernel execution
08:50:20 - Getting root
08:52:40 - We have root
08:55:00 - Polishing the exploit and cleaning it up