The BlueBox Security Scanner says that my Nexus 4 is still vulnerable to two signature exploits.
As far as I understood the exploit can circumvent the apk-signature-check so that any apk posing as an update for a system-apk will be installed as system app.
Is there a known way to install sudo/su with this exploit?
I would like to do so before my Nexus gets patched...
Update 2013-07-22:
What I am looking for is a step by step guide along these lines:
- get sudo-apk
- choose one unused system-app
- remove updates for this system-app
- download latest update for this system-app
- integrate sudo-apk with system-app-update-apk
- install
- have joy
su
to work, it must be in the$PATH
. To modify that accordingly,/system
must be mounted r/w -- and that doesn't happen even when a system app is updated. – Izzy♦ Jul 22 '13 at 13:50