Date: 06/05/2024

Vendor: Immortal Cyber

Technology/Topic: Android Exploit Chain

URL: https://immortal-cyber.com

TEM Video (milTube): https://www.milsuite.mil/video/watch/video/69593

Immortal Cyber TEM Slide DeckDownload

______________________________________________

Welcome to the Technical Exchange Meeting (TEM)!

This capability displays remote code execution (RCE) via Chrome browser, sandbox escape from Chrome browser, and local privilege escalation (LPE). A myriad of vulnerabilities was integrated into a seamless set of exploits to remotely arrive to kernel code execution. From this placement within the device, the capability facilitates the opportunity to quickly harvest information from the device and/or install an agent for continuous presence.          

______________________________________________

To join the DISA TEM mailing list, please contact: disa.tem@mail.mil

______________________________________________

Disclaimer:

— TEMs do not serve as a marketing venue or request for proposal actions.

— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.

— TEMs do not serve as an endorsement of any presented technologies or capabilities

— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.

— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly facing content is permissible in DISA TEM sessions.