-
Notifications
You must be signed in to change notification settings - Fork 26
Authorised Area
Tim Guenther edited this page Jul 24, 2017
·
1 revision
This challenge will teach you a way to bypass poorly constructed authorisation controls. The recommended tool is Drozer.
- Start the Drozer application (on the home screen) in the Android VM.
- Create a port forwarding for the application with the following command:
adb forward tcp:31415 tcp:31415
This will forward the the tcp traffic between the emulator/device and your system. - Connect Drozer with the Android VM:
drozer console connect
The application will ask you for a password to display the page. Your task is:
- Circumvent the password check in order to view the "authorised" Area of the application.
Please open an issue in the case you found a mistake in the wiki.