Mobile Device Exploitation Cookbook by Unknown

Author:Unknown
Language: eng
Format: epub
Publisher: Packt Publishing

How to do it...

Every pentest starts with fingerprinting. Let us use Drozer for the same. The Drozer User Guide is very helpful for referring to the commands.

The following command can be used to obtain information about an Android application package:

run app.package.info -a <package name>

We used the same to extract the information from the GoatDroid application and found the following results:

Notice that apart from the general information about the application, User Permissions are also listed by Drozer.

Further, let us analyze the attack surface. Drozer's attack surface lists the exposed activities, broadcast receivers, content providers, and services. The in-genuinely exposed ones may be a critical security risk and may provide you access to privileged content.

Drozer has the following command to analyze the attack surface:

run app.package.attacksurface <package name>

We used the same to obtain the attack surface of the Herd Financial application of GoatDroid and the results can be seen in the following screenshot. Notice that one Activity and one Content Provider are exposed.

We chose to attack the content provider to obtain the data stored locally. We used the following Drozer command to analyze the content provider of the same application:

run app.provider.info -a <package name>

This gave us the details of the exposed content provider, which we used in another Drozer command:

run scanner.provider.finduris -a <package name>

We could successfully query the content providers. Lastly, we would be interested in stealing the data stored by this content provider. This is possible via another Drozer command:

run app.provider.query content://<content provider details>/

The entire sequence of events is shown in the following screenshot:

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.