Demonstration of an Android App with no permissions giving an attacker a remote shell. Tested on Android 1.5 to 4.0.
Hmm…it looks like things are taking a while to load. Try again?
