testing-android-intents-for-vulnerabilities

# Testing Android Intents for Vulnerabilities ## When to Use Use this skill when: - Assessing Android app exported activities, services, receivers, and content providers - Testing for intent injection and unauthorized component invocation - Evaluating broadcast receiver security for sensitive data exposure - Performing IPC-focused penetration testing on Android applications **Do not use** on production devices without explicit authorization. ## Prerequisites - Rooted Android device or emulator with ADB - Drozer agent installed on target device (`drozer agent.apk`) - Drozer console on host (`pip install drozer`) - Target APK decompiled with apktool for AndroidManifest.xml analysis - Frida for runtime intent monitoring ## Workflow ### Step 1: Enumerate Exported Components ```bash # Using Drozer drozer console connect run app.package.info -a com.target.app run app.package.attacksurface com.target.app # Output shows: # X activities exported # X broadcast receivers exported # X content providers exported # X services exported # List exported activities run app.activity.info -a com.target.app # List exported services run app.service.info -a com.target.app # List exported receivers run app.broadcast.info -a com.target.app # List content providers run app.provider.info -a com.target.app ``` ### Step 2: Test Exported Activities ```bash # Launch exported activities directly run app.activity.start --component com.target.app com.target.app.AdminActivity # Launch with inte...