Sploitus

Exploit for CVE-2026-0073

kitploit ยท 2026-08-25

Exploit Code

MARKDOWN6 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-FREDEVSEC-CVE-2026-0073
์•ˆ๋“œ๋กœ์ด๋“œ์—์„œ 0-Click RCE ์•ˆ๋“œ๋กœ์ด๋“œ ADB์˜ ์‹ฌ๊ฐํ•œ ์ทจ์•ฝ์  CVEโ€‘2026โ€‘0073, adbd ๋ฐ๋ชฌ์˜ TLS ์ธ์ฆ์„œ ํ™•์ธ์—์„œ ์ธ์ฆ ์šฐํšŒ ๊ฒฐํ•จ, ํŠนํžˆ adbd_tls_verify_cert ํ•จ์ˆ˜์—์„œ TLS ์ธ์ฆ์„œ ํ™•์ธ ๊ณผ์ •์—์„œ ๋ฌด์„  ๋””๋ฒ„๊น…(Wireless Debugging)์ด ๊ณต๊ฒฉ์ž๋ฅผ ์ด๋ฏธ ์Šน์ธ๋œ ์ปดํ“จํ„ฐ๋กœ ๋ฐ›์•„๋“ค์ด๊ฒŒ ํ•˜์—ฌ ์žฅ์น˜์˜ ๋ณด์•ˆ์„ ์šฐํšŒํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

์ด ์ทจ์•ฝ์ ์€ Android 14, 15, 16์—์„œ ๋ฐœ์ƒํ•ฉ๋‹ˆ๋‹ค. ์ฐธ๊ณ ๋กœ ์ด ์ทจ์•ฝ์ ์€ ์•ˆ๋“œ๋กœ์ด๋“œ์—์„œ adb๊ฐ€ ํ™œ์„ฑํ™”๋˜์–ด ์žˆ๊ณ  ๋ฌด์„  ๋””๋ฒ„๊น…๋„ ํ™œ์„ฑํ™”๋œ ๊ฒฝ์šฐ์—๋งŒ ์•…์šฉ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋ฅผ ํ†ตํ•ด ๋™์ผํ•œ ๋„คํŠธ์›Œํฌ์— ์žˆ๋Š” ๋ชจ๋“  ํœด๋Œ€ํฐ, TvBox(์ผ๋ฐ˜์ ์œผ๋กœ ๊ธฐ๋ณธ์ ์œผ๋กœ ํ™œ์„ฑํ™”๋จ), ํƒœ๋ธ”๋ฆฟ, ์—๋ฎฌ๋ ˆ์ดํ„ฐ, ์Šค๋งˆํŠธ์›Œ์น˜, Chromecast์— ์ ‘์ด‰ ์—†์ด ์นจ์ž…ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

> node adb-bypass.js  [porta] node adb-bypass.js  [porta] [--cmd "seu comando"] [-v]