## https://sploitus.com/exploit?id=562D4060-2FC8-5821-BAC2-7DB5C0865B7E
This repository contains a collection of exploits and proof-of-concept (POC) code for various vulnerabilities, including a high-severity vulnerability in Android versions 12 and 13 (CVE-2024-0044), an unauthenticated remote command execution (RCE) vulnerability in BYOB (Build Your Own Botnet) v2.0.0, and a GraphQL API vulnerability (CVE-2021-4191). The exploits are written in Python and utilize various libraries and frameworks, including BeautifulSoup, requests, and colorama.
The CVE-2024-0044 exploit targets a vulnerability in the PackageInstallerService.java file, which allows an attacker to perform a "run-as any app" attack, leading to local escalation of privilege without requiring user interaction. The exploit is achieved by manipulating the session creation process, potentially gaining unauthorized access to sensitive data and performing unauthorized actions on the affected device.
The BYOB exploit works by spoofing an agent callback to overwrite the sqlite database and bypass authentication, then exploiting an authenticated command injection in the payload builder page. The exploit is achieved by uploading a malicious database to the BYOB server and then executing a command injection attack on the payload builder page.
The GraphQL API vulnerability (CVE-2021-4191) is a high-severity vulnerability that