Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Android Exploits and Techniques
(S)
Proof-of-Concept Name | Contract/Partner | Weaponized/Delivered Name | Description | Affected Devices | Type |
---|---|---|---|---|---|
Lugia | (Peppermint) | LugiaLight (lgl) | MSM devices until ~4.4 | Priv | |
Freedroid | Fangtooth | Freedroid (fd3) | Kernel/user mem vuln | Almost all devices ~4.0 until ~4.3/4.4 | Priv |
Colobus | Fangtooth | Creatine (crt) | Shell->Root Priv (Framebuffer/graphics stack vuln) | Priv | |
Bonobo | Fangtooth | Glutamine (glt) | Shell->Root Priv (Framebuffer/graphics) | Priv | |
Dugtrio | Anglerfish | Angerquake/Dugtrio | Browser/Javascript bridge | Most ICS devices | Remote Access |
Skor | Angerquake/Skor | Remote Access | |||
Totodile | Anglerfish | Livestrong | Library load via property | Kitkat+ devices | Persistence |
Night Monkey | Fangtooth | Nightmonkey | User->System Priv, physical access required (Dex repack/MTP vuln) | Priv | |
Swamp Monkey | Fangtooth | B12 | System->Root Priv | Priv | |
FLAAFY | Anglerfish | User->System Priv | Priv | ||
Flameskimmer | SurfsUp | HGH | User->Root Priv | BCM WiFi chipset devices | Priv |
Snubble/Snubull | Anglerfish | User->System Priv (with Absolute LoJack software) |
Samsung Galaxy S5 (KOT49H.G900HXXU1ANCD) Samsung Galaxy Note 3 (KOT49H.N900W8UBUCNC1) Samsung Galaxy S4 (KOT49H.I9500UBUFNB3) |
Priv | |
Simian | Fangtooth (Not yet delivered) | User->Root Priv, KGSL driver | MSM8974 devices | Priv | |
Salazar | Chrome v34 - ? | Remote Access | |||
Spearrow | Remote Info Leak | ||||
Starmie | Remote Access |