Android Security & Malware chat group

SAINT GRAIL: the Go rewrite already found two real vulnerabilities and produced fully working PoCs. 🔹 Chromium TOCTOU — race condition in DownloadManager. Two downloads with the same filename started at the same time can collide; one silently overwrites the other. The browser reports both as completed, but only the attacker's file remains on disk. 🔹 7‑Zip CRC Bypass + SFX — integrity check bypass by stripping the kCRC block from the 7z header. Combined with SFX, it drops and executes an arbitrary payload without CRC verification. Affects 7‑Zip 9.20 to 25.01 (15 years of releases). Persistence via Startup folder included. Scripts, documentation, and exact source references are public. 🔗 https://github.com/tty503/saint-grail-pocs-output 📖 Full write‑up: https://tty503.com/saint-grail-go.html