An example Analysis of the principle and Exploitation of arbitrary JS Code execution vulnerabilities in Facebook

This article introduces the principle of Facebook arbitrary JS code execution vulnerabilities and case analysis, the content is very detailed, interested friends can refer to, hope to be helpful to you.

Preface

Recently, the FB Android application has revealed a vulnerability in the execution of arbitrary JS code. It is also interesting to analyze it. Share and learn. Please forgive me for any inadequacies. Welcome to discuss and learn.

Overview of 0x00

Test environment:

Android 4.4 nexus 5

Test version:

Facebook com.facebook.katana_186.0.0.48.81.apk

Download the test version:

9Apps

Principle of 0x01 vulnerability

According to the brief description of the vulnerability, I know that the cause of the vulnerability is still the problem of deeplink. If you are not familiar with this knowledge, you can refer to my other articles.

Since it is deeplink, it is quite normal to cut into the idea from AndroidManifest.xml. By searching for "