28 August 2026
Файл
app-release.apk · 16 KB · click to show
app-release.apk · 16 KB · click to show
特权隔离
本应该是Android系统中最受限的隔离进程，却拥有众多特权，非常奇妙。
0. 随机uid，曾经的magiskhide绕过方案，magisk已处理。
https://t.me/magiskalpha/255
1. app zygote的setuid权能在selinux关闭时不受限制，已失效。
https://t.me/vvb2060_Channel/81
2. app zygote可以检测selinux状态，ksu已处理。
https://t.me/magiskalpha/714
3. app zygote native没有unshare，和init挂载命名空间相同，无法隐藏。
https://t.me/vvb2060_Channel/60
现在，我们又发现了一个隔离进程的特权：遍历进程。隔离进程拥有gid 3009，可以不受限访问/proc。
这是从隔离进程诞生起就拥有的能力，但10年来无人发现。2020年Project Zero偶然发现app zygote拥有gid 3009，可惜的是，没有发现存在时间更久的隔离进程有一模一样的问题，并且修复补丁特意忽略了隔离进程情况，只对is_child_zygote清空groups，真是哭笑不得。
由于我们在某加固壳中观察到了野外利用，因此决定直接公开该漏洞细节。我们还编写了一个poc，以检测root为例： https://github.com/LSPosed/Privisolated
20.8K · 老实人 chao 青年支I'm looking for a friend in a Western country to help with my ChatGPT authentication (cyber). I'm willing to pay $50 USD.
Reported 不会主动私信 chao [6489794945] to admins.
hi everyone i have erased my persist partition and fucked up my sensors no fingerprint no vibrations
device is oneplus 9 (LE2110) is there any way i can recover from this ? i have obtained a working persist partition from a friend of same phone but different model LE2111 but it does not work for fingerprint and alert slider everything else works
Android Hackers
Muhammad Asimhi everyone i have erased my persist partition and fucked up my sensors no fingerprint no vibrations
device is oneplus 9 (LE2110) is there any way i can recover from this ? i have obtained a working persist partition from a friend of same phone but different model LE2111 but it does not work for fiNo, there's no way to recover this, game over.
because most of the time it should go to RPMB then to SFS/PFM licences as fallback, since you said nothing works, both are erased it seems
Muhammad Asimhi everyone i have erased my persist partition and fucked up my sensors no fingerprint no vibrations
device is oneplus 9 (LE2110) is there any way i can recover from this ? i have obtained a working persist partition from a friend of same phone but different model LE2111 but it does not work for fi
a friend phone won't save you unfortunately sorry