The BlueBox Security Scanner says that my Nexus 4 is still vulnerable to two signature exploits.
As far as I understood the exploit can circumvent the apk-signature-check so that any apk posing as an update for a system-apk will be installed as system app.
Is there a known way to install sudo/su with this exploit?
I would like to do so before my Nexus gets patched...
What I am looking for is a step by step guide along these lines:
- get sudo-apk
- choose one unused system-app
- remove updates for this system-app
- download latest update for this system-app
- integrate sudo-apk with system-app-update-apk
- have joy