laginimaineb/ExtractKeyMaster

PoC

Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431

view exploit source poc_in_githubauthor laginimainebpublished 2016-06-30catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-2431US	high7.8	1.97% (80th)	Exploit	2016-05-09
The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted applica…
CVE-2015-6639US	high7.8	6.96% (94th)	Exploit	2016-01-06
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QS…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.