Skip to content

Authorised Area

Tim Guenther edited this page Jul 24, 2017 · 1 revision

This challenge will teach you a way to bypass poorly constructed authorisation controls. The recommended tool is Drozer.

Setup

Drozer Commands

  1. Start the Drozer application (on the home screen) in the Android VM.
  2. Create a port forwarding for the application with the following command:
    adb forward tcp:31415 tcp:31415
    This will forward the the tcp traffic between the emulator/device and your system.
  3. Connect Drozer with the Android VM:
    drozer console connect

Task

The application will ask you for a password to display the page. Your task is:

  1. Circumvent the password check in order to view the "authorised" Area of the application.
Clone this wiki locally