Skip to content

Intents

mzfr edited this page May 23, 2021 · 3 revisions

Basically a data object that tells what task is to be performed.

<activity android:name="ActivityName">
    <intent-filter>
	<action android:name="android.intent.action.View">
	<android:scheme="http">
    </intent-filter>
</activity>

This is a simple activity telling about the action and the type of URL it accepts. The scheme of that URL can be http.

There are Explicit intent as well - They are sort of one that opens the URL in the android browser. Think of like when you click on some article link in twitter app and it opens, In-app Browser.

**run app.activity.start —action <activity-name> —data-uri <URL> —component <component> <package-name>**

This is the command that can be used to interact with acitivites using drozer.

NOTE: Always make sure to check out the code of that Activity to see what it is doing with the URL and see if it can be exploited.

  • Review the source code that handles the exported intents
Clone this wiki locally