Exploit for Deserialization of Untrusted Data in Google Android CVE-2024-31317

## https://sploitus.com/exploit?id=F8BCA2CD-F8BE-5C1A-8B73-CBB62062D161
# Project Documentation
Official QQ Group: 745307987

Although PoC-Deployer-System is already a separate project, we would like to express our gratitude here.
Project: https://github.com/Webldix/CVE-2024-31317-PoC-Deployer

**Updates:**
- **Custom injection of uid/gid/selinux groups**  
- **Added application data extraction functionality**  
- **Added Zygote log monitoring functionality**  
- **Added support for using Zygote parameters**

## Feature Demonstration

### Image 1
![Application image](https://codeberg.org/wqry085/PoC-Deployer-System/src/branch/main/jpg/a1.jpg)

Functionality for injecting uid/gid/groups

### Image 2
![Application image 2](https://codeberg.org/wqry085/PoC-Deployer-System/src/branch/main/jpg/a2.jpg)

Advanced features

## Supported Operating Systems
Security patch 2024 6-1 <  
Android 9-13

## Features

- Simplified implementation of CVE-2024-31317: Users only need to be authorized with shizuku permissions to perform all privilege escalation operations within the app.  
- Supports reverse interactive shell interactions