Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
Rapid7ã®ç 究è ã«ããã¨ãGoogleã¯Android 4.3ï¼Jelly Beanï¼ã¾ã§ã®ãã¼ã¸ã§ã³ã«ã¤ãã¦ãWebViewã®èå¼±æ§ä¿®æ£ãããã®æä¾ãæã¡åã£ãã ä¸çã§ã¾ã 9åå°ãã¾ãã®ç«¯æ«ã«æè¼ããã¦ããæ§ãã¼ã¸ã§ã³ã®Androidã«ã¤ãã¦ãç±³Googleãèå¼±æ§ãä¿®æ£ãããããã®æä¾ãæã¡åã£ã¦ãããã¨ãåãã£ãã¨ãããèå¼±æ§æ¤è¨¼ãã¼ã«ãMetasploitããææããRapid7ã®ç 究è ã1æ12æ¥ã®ããã°ã§ä¼ããã ããã«ããã¨ãGoogleã¯æè¿ã¾ã§ãAndroid 4.3ï¼Jelly Beanï¼ã®èå¼±æ§ã«ã¤ãã¦å ±åãåããã¨è¿ éã«å¯¾å¿ãã¦ãããã¨ãããããã®ã»ã©æ°ãã«4.4ãããåã®ãã¼ã¸ã§ã³ã®WebViewã®èå¼±æ§ãå ±åããã¨ãããGoogleã®ã¤ã³ã·ãã³ã対å¿æ å½è ããã¡ã¼ã«ã§ãããå½±é¿ãåããã®ã4.4ãããåã®ãã¼ã¸ã§ã³ã§ããã°ãæã ã¯ä¸è¬çã«ãèªãããããéçº
ããã»ã¹ééä¿¡ãæ ããBinderãã®åé¡ãçªããã¨ã§ãèªè¨¼æ å ±ããã¼ã¿ãªã©ãçã¿åããã¨ãã§ããã¨ããã Android OSã«ç«¯æ«å ã®æ å ±ãçã¿åãããå¯è½æ§ã®ããæ°ããªåé¡ãè¦ã¤ãã£ãã¨ãããCheck Point Software Technologiesã®ç 究è ãããªã©ã³ãã§éå¬ãããBlack Hat Europeã§æããã«ããã å社ã®ã»ãã¥ãªãã£ç 究è ããã¤ã»ã¢ã¼ãã³ã·ã¥ã¿ã¤ã³æ°ã«ããã¨ããã®åé¡ã¯ããã»ã¹ééä¿¡ã®ã¡ãã»ã¼ã¸ãä¼éãããBinderãã«èµ·å ãããBinderçµç±ã§ããåãããããã¼ã¿ã¯ããã£ããã£ãããã¨ãã§ãã¦ãã¾ãã¨ããããã¼ãã¼ãã§å ¥åããæ å ±ãSMSã§åä¿¡ãã2段éèªè¨¼ç¨ã®ã³ã¼ãã¨ãã£ãããããæ å ±ãçã¿è¦ããã¦ãã¾ãæããããã Android OSã¯æ±ç¨çãªOSã¨ã¯ç°ãªããããã»ã¹ééä¿¡ããã®Binderãå¶å¾¡ããã¢ã¼ããã¯ãã£ã«ãªã£ã¦ããã¨ãã
è¿å¹´ããã¤ã¹ããã¯ãªã¹ãã¼ããã©ã³ãé«å質ãªãããã¯ã¼ã¯ãæ®åããããã«ããã¢ãã¤ã«ã²ã¼ã ã®å¶ä½ææ³ããããåãå·»ãç°å¢ãå¤åãã¦ãã¾ãããã¹ã¯ã¦ã§ã¢ã»ã¨ããã¯ã¹ã§ã¯ããã®ãããªç°å¢ã®å¤åã«å¯¾ãã¦ãæ¥ã æ°ããªãã£ã¬ã³ã¸ããç¶ãã¦ãã¾ããããã¦ããã®ãããªã¹ãã¼ãæ溢ããæ¥çã®æµãã«ã¯ãä¼ç¤¾ã®æ ãè¶ ããæè¡æ å ±ã®å ±æã交æµãæ¬ ãããªãã¨æãã¦ããã¾ãã ããã§ãã®å¤ã社å ã®ã¨ã³ã¸ãã¢ã»ãã¯ãã«ã«ãã£ã¬ã¯ã¿ã¼ã«ããææ°ã®ã¢ãã¤ã«éçºã®æè¡æ å ±ã社å ã¢ãã¤ã«ã¨ã³ã¸ã³ãéçºç§è©±ã«ããã»ãã·ã§ã³ãã¡ã¤ã³ã«ãã¹ã¯ã¦ã§ã¢ã»ã¨ããã¯ã¹ ã¢ãã¤ã« ãªã¼ãã³ã«ã³ãã¡ã¬ã³ã¹ãéå¬ããéã³ã¨ãªãã¾ãããã¾ããã»ãã·ã§ã³ã®å¾ã¯ç»å£ããå¼ç¤¾ã¹ã¿ããã¨ç´æ¥ãã£ã¹ã«ãã·ã§ã³ãããªã¼ãã¼ã¯ãã§ããå ´ãè¨ãã¦ããã¾ãããã®æ©ä¼ã«ã¹ã¯ã¦ã§ã¢ã»ã¨ããã¯ã¹ã¨ããä¼ç¤¾ã«ã¤ãã¦ãããã詳ããç¥ã£ã¦é ããã°å¹¸ãã§ãã ããã¼ã¸ã£ã¼ã»ãã¯
Androidã®Makeã®æ¬ä½ã¯ãbuild/core/main.mkã«è¨è¿°ããã¦ãããããèªèº«ã¯ãmakeã¨ããããããã¹ã¯ãªããéã¨ãã£ãæãã§ãèªãã®ã¯çµæ§è¦å´ããã ãã¤ã³ãã¯ããµããã£ã¬ã¯ããªã¼ã«ãããAndroid.mkãfindãã¦ãincludeãã¦ããã¨ããç¹ã subdir_makefiles += \ $(shell build/tools/findleaves.sh \ --prune="./vendor" --prune="./out" $(subdirs) Android.mk) ifneq ($(ONE_SHOT_MAKEFILE),) ... else include $(subdir_makefiles) endif ããã«ãã£ã¦ããµããã£ã¬ã¯ããªã¼ã«Android.mkãé ç½®ãã¦ããããã®ãã£ã¬ã¯ããªã¼ã§ãé ç½®ããAndroid.mkã®ä¸ã®LOCAL_M
LOCAL_PATH:= $(call my-dir) include $(CLEAR_VARS) LOCAL_MODULE_TAGS := optional LOCAL_SRC_FILES := $(call all-java-files-under, src) LOCAL_PACKAGE_NAME := myApp include $(BUILD_PACKAGE) # Use the folloing include to make our test apk. include $(call all-makefiles-under,$(LOCAL_PATH)) ä¸è¨ä¾ã ã¨ãLOCAL_MODULE_TAGS ã optionalã®ãããPRODUCT_PACKAGESã§ãã«ã対象ã«æå®ããå¿ è¦ãããã PRODUCT_PACKAGES ã®è¿½å LOCAL_MODULE_TAGS 㧠o
ãã®åº¦ãæ°ããããã°ã«ç§»è»¢ãããã¨ã¨ãªãã¾ããã æ°ããããã°ã§ã¯ãAndroidã ãã§ãªã ä»ã®æè¡ãã¬ã³ãããå±ããã¦ã¾ããã¾ãã æ°URL http://bril-tech.blogspot.jp/ æ°RSS http://bril-tech.blogspot.com/feeds/posts/default ãææ°ãããã¾ãããåç»é²ããé¡ããããã¾ãã ã©ãããããããé¡ãè´ãã¾ãã æ©ããçºå£²ãå¾ ã¡é ããAndroid Wearã®ç«¯æ«ã§ããã端æ«ãè²·ã£ã¦ããç°å¢ãæ´ãã¦ãããéçºè ã¨ãã¦æ¥½ããã¾ããã ã¨ãã¥ã¬ã¼ã¿ã使ã£ã¦éçºãã§ããã®ã§ç°å¢æ§ç¯æé ãç´¹ä»ãã¾ãã ç¾æç¹ã§ã¯è²ã å¶éããããKitkatãæè¼ãããå®æ©ã¨çµã¿åãããªãã¨ã¨ãã¥ã¬ã¼ã¿ã使ã£ãéçºãã§ããªãã®ã§ã注æãã ããã 4.4.2以éã®AVDã使ã£ã¦ã´ãã§ã´ãã§ãã¦ã¨ãã¥ã¬ã¼ã¿ã2åç«ã¡ä¸ããã°ä½ã¨ãã§ããã
ä»åã¯ãCTSæ¦è¦ãç°å¢ãåºæ¬æä½ã«ã¤ãã¦è¨è¼ãããã¾ãã ãªããæ¬å 容ãå®æ½ããä½ããã®åé¡ãæ害ãªã©ãçºçããå ´åãå½ç¤¾ã¯ä¸åã®è²¬ä»»ãè² ãã¾ããã ããã¾ã§èªå·±è²¬ä»»ã§å®æ½ãã¦ãã ããã ãããã®ãã¨ãèªèé ããä¸ã§ããå©ç¨ãåèã«ãã¦ãã ããã ï¼.ã¯ããã« æ¨ä»ã注ç®ãæµ´ã³ã¦ããAndroidã§ãããCTSã¨ããã®ã¯ãã¿ãªãããåç¥ã§ããããï¼ ååã¯èãããã¨ãã£ã¦ããå®éã使ã£ããã¨ç¡ã人ãã»ã¨ãã©ã ã¨æãã¾ãã ãªããªããã¢ããªãã³ãã¼ã«ã¯ãã¾ãé¢ä¿ãªããã¨ã§ããããããããAndroidãå©ç¨ãã¦ãä¸ã« ä½ããã®ãã¼ããåºããã¨ãã人ãã¡ï¼ã¡ã¼ã«ãå人å«ãï¼ãã¾ãã¯frameworkãæ¹å¤ï¼Bug対å¿ãªã©)ãã Android Open Source Projectsã«submitãããã¨ãã人ã«ã¨ã£ã¦ã¯ãå®ã¯é¿ãã¦ã¯éããªãéã§ãã æ¬è¨äºã¯ããããªäººãã¡ã®ããã«æ§ãã¾ãã
ããªãç¨éã®éå®ãããå 容ã§ããã§ãããä»åã¯ã¨ã¦ãå½¹ã«ç«ã£ãã®ã§ã¡ã¢ãã¦ããã¾ãã android ã®ãã¡ã¼ã ã¦ã§ã¢ã«ã¯ .odex ã¨ããæ¡å¼µåã®ã¤ãããã¡ã¤ã«ãåå¨ãã¾ã (ããªãå ´åãããã¨æãã¾ãã)ãããããã ããã .apk ã¨ã»ããã§åå¨ãã¾ããaaaa.apk 㨠aaaa.odex ã®ãããªæãã§ãã .apk ã¯ã¢ããªã±ã¼ã·ã§ã³ããã±ã¼ã¸ã§ããã.odex ã¯ã¨ããã¨ãOptimized dexãã¨ã®ãã¨ã§ããã§ã¯ dex ã¯ã¨ããã¨ããDalvik Excecutableãã®ãã¨ã§ããã¤ã¾ããandroid ã® Dalvik VM ã§å®è¡å¯è½ãªãã¡ã¤ã«ã® .dex ãæé©åããã®ã .odex ãã¡ã¤ã«ã§ãã é常ã.dex ãã¡ã¤ã«ã¯ .apk ã«å«ã¾ããå½¢ã§é å¸ããã¾ãã.apk ã¯åãªã zip ã¢ã¼ã«ã¤ããªã®ã§ãé©å½ãª .apk ãå±éãã¦ã¿ãã¨ããclas
å½éçã¤ã¡ã¼ã¸ãå°å ¥ããSamsung Galaxy Nexus SC-04D ã§ã ãã³ã¢ãªãªã¸ãã«æ©è½ãæå¹ã«ããè¨é²ã ï¼è¦ãäºåããã¯ã¢ããï¼ ä½ã¡ã¢ãªç°å¢ã«æé©åãããä»®è£ ãã·ã³ã§åä½ããã Dalvik VM ã§åãã¢ããªã¯dex(Dalvik Executable)å½¢å¼ã«ãªã£ã¦ãã¦ã dex ã端æ«ã«æé©åãããã£ãã·ã¥ãã¡ã¤ã«ãodex(Optimized -) ã¨è¨ãã ã¢ããªããã±ã¼ã¸ã®apkã«dex ãå«ããã¨ã ã¢ããªåä½æã«odex ãã¡ã¤ã«ãçæãããodex ãã¡ã¤ã«ãå®è¡ãããä»çµã¿ã®ããã ã ããªã¤ã³ã¹ãã¼ã«ã¢ããªã¯æ³å®ãããç°å¢ã§ã®ã¿åä½ããã°è¯ãã®ã§ã apk ã«dex ãå«ãããapk+odex å½¢å¼ã§æä¾ãããå ´åãå¤ãã ã¨ããããã¦ã¼ã¶ã¼ã端æ«ã«æãå ¥ãã¦ãã¾ãã¨ãããããã¢ããªã¯é端ã«åä½ããªããªãã ããã§ãodex ããdex ãåçæã
ãµã¤ãã¼ã»ã³ãã¥ãã±ã¼ã·ã§ã³ãºï¼cciï¼ã¨ãã£ã¼ã»ãªã¼ã»ã¨ã ï¼DOMï¼ã¯9æ10æ¥ãAndroid端æ«ã®ã»ãã¥ãªãã£ããã¯è§£é¤å¾ã«ãã«ã¹ã¯ãªã¼ã³ã§åºåã表示ããã·ã¹ãã ãå ±åéçºããã¨çºè¡¨ããã ã¹ãªã¼ãã¢ã¼ããã復帰ããéã®ã»ãã¥ãªãã£ããã¯è§£é¤å¾ã«ããã«ã¹ã¯ãªã¼ã³ã®åºåã2ï½3ç§è¡¨ç¤ºãããä»çµã¿ãWebã§ãã¼ã¸é·ç§»ã®éã«æã¿è¾¼ãã¤ã³ã¿ã¼ã¹ãã£ã·ã£ã«ååºåãããã¯è§£é¤ã«é©ç¨ãããã®ã§ããã¦ã¼ã¶ã¼ã®ã¢ããªå©ç¨é »åº¦ãªã©ã«å½±é¿ãåãããã¨ãªãåºåã訴æ±ã§ãããã¨ããã両社ã§ç¹è¨±ãåºé¡ããã å¹´é½¢ãæ§å¥ãªã©ã®ã¦ã¼ã¶ã¼æ å ±ãGPSã«åºã¥ãå°åæ å ±ãæé帯ãªã©ã§ã¿ã¼ã²ãã£ã³ã°ãã¦é ä¿¡ãããã¨ãå¯è½ãåºåé²è¦§ã«ãã£ã¦ãã¤ã³ããä»ä¸ãããã主è¦ãã¤ã³ããµã¼ãã¹ã¸ã®äº¤æãã§ããæ©è½ãæä¾ããã¨ããã åã·ã¹ãã ãå©ç¨ãããªãªã¸ãã«ã¢ããªããªãªã¼ã¹ããã»ããã¢ããªä¼ç¤¾ã¸ã®ã·ã¹ãã æä¾ãSDKã§ã®é å¸ââãè¨
2013å¹´7æ24æ¥ãã¹ãã¼ããã©ã³åãã®ä¸æ£ã¢ããªã«ããããäºä»¶ã§é®æè ãåºã¾ããï¼é¢é£è¨äºï¼ãä¸æ£ãªã¢ããªãã¹ããããå人æ å ±ãæãåããæµ·å¤ã®ãã¼ã¿ã»ã³ã¿ã¼ã«è»¢éãçºä¿¡è æ å ±ãå½ã£ã¦åºä¼ãç³»ãµã¤ãã®åºåã¡ã¼ã«ãªã©ãéãã¤ããçãããããã¦ãã¾ãã é©ãã¹ãã¯å ¥æããå人æ å ±ã®è¦æ¨¡ãé®æè ãåºãã°ã«ã¼ãã¯ãè¤æ°ã®ã¢ããªã«ãããæ¥æ¬ã®æºå¸¯é»è©±å¥ç´æ°ã®4åã®1ã«ããã延ã¹3700ä¸äººåã®å人æ å ±ãéããã¨ã¿ããã¦ãã¾ããåæ§ã®æå£ã§å人æ å ±ã®è©åãçãã¢ããªã¯ãå½å ã§çã¾ããã ãã§ãªãæµ·å¤ããæµå ¥ãã¦ããã®ãå®æ ã§ãã ã¢ããªããã¦ã³ãã¼ããã¦å©ç¨ããã®ã大åæã¨ãªã£ã¦ããã¹ãã¼ããã©ã³ãæ®åããOSã®ä¸ã§ã¯ãæ©æ¢°ã«ããèªå審æ»ãå°å ¥ããã¢ããªæµéã«èªç±ãªç«å ´ãã¨ãGoogleã®Androidãæ§é çãªãªã¹ã¯ãæ±ãã¦ãã¾ãã ããããä¸ãã¦ã¼ã¶ã¼ã¯ä¸æ£ã¢ããªãå人æ å ±ãéãã¦ä½ãçã£ã¦ãã
Androidã¢ããªã§ç»é¢ãä½æããéãLinearLayoutã¨RelativeLayoutã®ä½¿ãæ¹ããã£ããææ¡ãã¦ãããªãã¨ãå¾ã è¦å´ãããã¨ãå¤ãã¨æãã¾ãã®ã§ãã¬ã¤ã¢ã¦ãæ§æãèªåã®ç¥ãç¯å²ã§ã¾ã¨ãã¦ã¿ã¾ããã LinearLayoutã®å ´å 1 åçã«é ç½® XML 2 ä½ã£ãå¹ å ¨ä½ã«é ç½® XML 3 çãä¸ã§ï¼çå XML 4 ä¸è¨ã®ç¸¦ãã¼ã¸ã§ã³ XML RelativiLayoutã®å ´å 5 両端åºå®å¹ ãçãä¸ã¯å¹ ãã£ã±ã XML 6 ä¸è¨ã®ã¬ã¤ã¢ã¦ãã«è¿½å¾ããå½¢ã§é ç½® XML 7 ä¸ä¸ã«ä¸¡ç«¯ãçãä¸é ç½®ã®ãã¿ã³ãé ç½® XML 8 ä¸è¨ã¬ã¤ã¢ã¦ãã®ç©ºç½ãåããé ç½®(ListViewç) XML 9 ä¸è¨ã¬ã¤ã¢ã¦ãä¸å¤®ã®ä¸¡ç«¯ã«ããã¿ã³ãé ç½® XML 10 ç¸äºã«ä½ç¨ããé ç½® XML LinearLayoutã¨RelativiLayoutãè¤å 11 ãã¿ã³ã®é«ããä»»æã®ã¬ã¤ã¢ã¦
ååã®æ¥è¨ã®ç¶ã Eclipseã使ã£ãAndroidã®ããã°ã©ã ã®éçºç°å¢ãä½ã ã¨ãããã¨ã§ã JDKã¨Eclipseããã¦ã³ãã¼ã JavaSE Downloadãµã¤ããã Java SE Development Kit (JDK) 6 Update 12ããã¦ã³ãã¼ã ã¤ã³ã¹ãã¼ã«ã¯ãã¦ã³ãã¼ããããã¡ã¤ã«ããã®ã¾ã¾å®è¡ããã åºæ¬ããã©ã«ãã§OKã㨠Eclipseã¯Eclipse Downloadsãã Eclipse IDE for Java Developersããã¦ã³ãã¼ã ãã£ã¡ãã解åããã ãã§OK 楽ã£ã¦è¯ãã Ecliplseã§Androidã®éçºç°å¢ãæºåããããã« Android Development Toolsã®ãã¦ã³ãã¼ãã¨ã¤ã³ã¹ãã¼ã«ãè¡ã ãã¦ã³ãã¼ããã¦è§£åãããã©ã«ãããeclipse.exeãç«ã¡ä¸ãã ä½æ¥ãã©ã«ããèãããã®ã§ã好ããªãã©ã«
ãã®æ¥è¨ã¯ãã£ã¯ã·ã§ã³ã§ãï¼ç»å ´ãã人åã»å£ä½åã»å°åã»è·æ¥ãªã©ã¯ããã¶æ¶ç©ºã®ãã®ã§ãï¼ ãªã®ã§å®éã®ãã®ã¨ã¯ä½ãé¢ä¿ãããã¾ããï¼ ããããï¼åçã®ããã«è¦ããç»åã¯ï¼£ï¼§ãããã¯å¿µåã«ãããã®ã§ãï¼ 2011-03-21 (æ) *[Android] å®æ©ã«ãããã¯ã¼ã¯è¶ãã«adbæ¥ç¶ USBã§æ¥ç¶ãã¦ããªãã¦ãï¼ãªã¢ã¼ããããã°ããããã¨ããã£ã¨ããã¾ãï¼USBã±ã¼ãã«ãè¦å½ãããªãæã¨ãï¼ç¹ãã£ã¦ãPCã¨éçºã«ä½¿ãããPCãå¥ã®å ´åã¨ãï¼Android端æ«ãå¤ããã¦USBã®ãã¼ãã足ããªãã¨ãã¨ãï¼å½¹ã«ç«ã¡ã¾ãï¼åãããã°æãç¡ãã§ãï¼ãã¶ãï¼ adbã¯ãããã¯ã¼ã¯è¶ãã®ãããã°ã«å¯¾å¿ãã¦ãã¾ãï¼ãã ï¼ã©ããã£ã¦ããã®ãã¨ãï¼å®æ©ã§ãåºæ¥ãã®ãã¨ãç¥ããªãã£ãã®ã§èª¿ã¹ã¦ã¿ãï¼å®éã«ãã£ãã®ã¯4æ¥ãããåã§ããï¼ http://hirokuma.typepad.jp/blog/2010
Gallery3Dã¨åãããã«Androidæ¨æºã®é³æ¥½ã¢ããªã¨é³å£°ã¬ã³ã¼ãã¼ãã©ã³ãã£ã¼ã«è¡¨ç¤ºããã¾ããã // é³æ¥½ã¢ã㪠adb shell am start -a android.intent.action.MAIN -n com.android.music/.MusicBrowserActivity // é³å£°ã¬ã³ã¼ãã¼ adb shell am start -a android.intent.action.MAIN -n com.android.soundrecorder/.SoundRecorder
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}