Has anybody figured out a way to use the Shellshock Bash vulnerability to get into a PIN locked Android device? (Specifically, the device I'm currently looking at is a Motorola Photon 4G.)
I unfortunately don't have Cellebrite, so I'm looking for other possible workarounds. I'm guessing there are probably several ways that might work to do this, given the wide usage of Bash… The downloadable Motorola connectivity tools give you access to the current set of call records and texts without unlocking it, but I'd like to be able to get to deleted content.
One thing that immediately comes to mind is that whatever is listening on USB for the Motorola software to connect could likely be hijacked somehow using Shellshock, but not being an exploit developer, I've no idea how to go about engineering something like that.
Thanks much
John
Stock versions of Android do not use Bash and do not (afaik) provide a way to set environment variables remotely.