rapid7/metasploit-framework — pull request #4287 by timwr (2014-12-01 16:52:57+00:00)
Title: add exploit for CVE-2014-3153, futex_requeue bug, towelroot.

This pr contains a proof of concept of CVE-2014-3153, which is a local privilege escalation exploit for Android.

- [ ] Download the Android NDK, put ndk-build on your path, and run "make" in external/source/exploits/CVE-2014-3153 to build the exploit (binaries not included).

- [ ] Checkout and build https://github.com/rapid7/metasploit-javapayload/pull/23

- [ ] Get an android meterpreter session and run the exploit.

- [ ] You should get a system session running as uid 0, unfortunately no android.* classes can be loaded so things like webcam_snap are unavailable, however you should have full access to the filesystem.

- [ ] Tested on a fully updated Nexus 7 tablet running 4.4.4

- [ ] Check that the webview_addjavascriptinterface exploit still works as before and