This project demonstrates how StrandHogg task injection works.
- Change
R.string.target_packagevalue to thetarget packagevalue. - Install the POC and run it.
- Run the
target packageand this POC will hijack the task.
- (2015) https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-ren-chuangang.pdf
- (2017) https://www.slideshare.net/phdays/android-task-hijacking
- (2019) https://twitter.com/ivanmarkovicsec/status/1201592031333761024
- (2019) https://promon.co/security-news/strandhogg/