2.0 / November 6, 2013
(4.5/5) (696)

Description

Requires the Xposed Framework. Grab it at http://forum.xda-developers.com/showthread.php?t=1574401and make sure it runs properly on your device.
ROOT only required for installing the Xposed Framework, itcan be dropped afterwards.

This app patches several vulnerability issues found onAndroid collectively known as 'Master Key' exploits:
- bug 8219321
- bug 9695860
- bug 9950697

In general terms, these allow exploiting signed APKs byreplacing the code they contain while maintaining the existingsignature valid (hence the term 'Master Key'), leading you to thinkthe original author is someone you trust.
The original Android sources have been corrected to fix theseproblems, but it might take a while
till stock ROMs include the fixes, if ever.

To check if you're vulnerable, you can use other apps availableon the store such as SRT AppScanner(https://play.google.com/store/apps/details?id=de.backessrt.appintegrity)or Bluebox Security Scanner(https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner).
Note: If using Bluebox Security Scanner, make sure to forcea refresh on the app once the fix is applied, otherwise you mightget a cached and incorrect result.

For any questions or to support my work, please visit http://forum.xda-developers.com/showthread.php?t=2365294

App Information Master Key multi-fix

  • App Name
    Master Key multi-fix
  • Package Name
    tungstwenty.xposed.masterkeydualfix
  • Updated
    November 6, 2013
  • File Size
    29k
  • Requires Android
    Android 2.3.3 and up
  • Version
    2.0
  • Developer
    Tungstwenty
  • Installs
    50,000 - 100,000
  • Price
    Free
  • Category
    Tools
  • Developer
  • Google Play Link

Master Key multi-fix Version History

Select Master Key multi-fix Version :
  • 2.0 (6) - Latest Version
  • 2.0 (6) - Latest Version
  • Master Key multi-fix 2.0 APK File

    Publish Date: 2017 /3/13
    Requires Android: Android 2.3.3+ (Gingerbread, API: 10)
    File Size: 29.3 kB
    Tested on: Android 2.3.3 (Gingerbread, API: 10)
    File Sha1: 00a7d0f2eb1d578e1709e8f2cb43921ce564ef93
    APK Signature: ab194864179e9649c70273b8414b333a7e0c4824
  • Master Key multi-fix 2.0 APK File

    Publish Date: 2015 /11/3
    Requires Android: Android 2.3.3+ (Gingerbread, API: 10)
    File Size: 29.3 kB
    Tested on: Android 2.3.3 (Gingerbread, API: 10)
    File Sha1: 00a7d0f2eb1d578e1709e8f2cb43921ce564ef93
    APK Signature: ab194864179e9649c70273b8414b333a7e0c4824

Tungstwenty Show More...

Master Key multi-fix 2.0 APK
Tungstwenty
Requires the Xposed Framework. Grab it at http://forum.xda-developers.com/showthread.php?t=1574401and make sure it runs properly on your device.ROOT only required for installing the Xposed Framework, itcan be dropped afterwards.This app patches several vulnerability issues found onAndroid collectively known as 'Master Key' exploits:- bug 8219321- bug 9695860- bug 9950697In general terms, these allow exploiting signed APKs byreplacing the code they contain while maintaining the existingsignature valid (hence the term 'Master Key'), leading you to thinkthe original author is someone you trust.The original Android sources have been corrected to fix theseproblems, but it might take a whiletill stock ROMs include the fixes, if ever.To check if you're vulnerable, you can use other apps availableon the store such as SRT AppScanner(https://play.google.com/store/apps/details?id=de.backessrt.appintegrity)or Bluebox Security Scanner(https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner).Note: If using Bluebox Security Scanner, make sure to forcea refresh on the app once the fix is applied, otherwise you mightget a cached and incorrect result.For any questions or to support my work, please visit http://forum.xda-developers.com/showthread.php?t=2365294