ZTE Blade Vantage Z839 Emode.APK android.uid.system LPE exploit

Author: hackerhouse-opensource

README.md

@@ -136,6 +136,6 @@ Exploits and proof-of-concept code from the team at Hacker House.
 |*winnuke2011.sh* | MS11-083 Win7/Vista/2008 ICMP refCount denial-of-service flaw |
 |*wysewig.py* | Wyse embedded XP remote SYSTEM command execution exploit | 
 |*xclm-exploit.c* | Microchip XC local root exploit (Linux) (installed by defcon 26 attendees) |
-|*zte-emode.txt*| ZTE Z839 Android handsets Emode.APK android.uid.system LPE exploit|
+|*zte-emode.txt*| ZTE Blade Vantage Z839 Emode.APK android.uid.system LPE exploit |
 
 These files are available under a Attribution-NonCommercial-NoDerivatives 4.0 International license.

zte-emode.txt

@@ -1,6 +1,6 @@
-ZTE Z839 Android handsets Emode.APK android.uid.system LPE exploit
-==================================================================
-ZTE Blade Vantage (Z839) Android 7.1.1 handsets contain an engineering mode APK that utilizes "Android Secret Codes"
+ZTE Blade Vantage Z839 Emode.APK android.uid.system LPE exploit
+===============================================================
+ZTE Blade Vantage (Z839) Android handsets running 7.1.1 contain an engineering mode that utilizes "Android Secret Codes"
 for accessing hidden engineering functionality. Such hidden features are common for Android devices and perform
 functions such as testing sensors and modem settings. Using the "secret codes", it is also possible for ZTE to obtain
 root privileges on any device by installing "zteroot.apk" (must be signed by ZTE as AndroidOS checks signature and privs
@@ -213,7 +213,7 @@ Linux localhost 3.10.49-g24db3b3 #1 SMP PREEMPT Sun Aug 20 11:59:09 CST 2017 arm
 
 The Janus vulnerability is patched in the latest version of Z839V1.0.0B13 - this flaw was tested against
 firmware version Z839V1.0.0B08. The Emode engineering access is present in the latest version but exploitation
-must be achieved through other means.
+must be achieved through other means as the Janus APK here will not load on a patched device.
 
  -- Hacker Fantastic
 (https://hacker.house)