Skip to content

Auth Brute

Tim Guenther edited this page Jul 24, 2017 · 1 revision

This challenge will teach you a way to bypass weak password protection.

Setup

This challenge does not need any special setup.

OPTIONAL:

  1. Start the Drozer application (on the home screen) in the Android VM.
  2. Create a port forwarding for the application with the following command:
    adb forward tcp:31415 tcp:31415
    This will forward the the tcp traffic between the emulator/device and your system.
  3. Connect Drozer with the Android VM:
    drozer console connect

Task

The application will ask you for a password. Your task is:

  1. Brute force the login via the intent.
Clone this wiki locally