Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fuzz the intents and try to capture screen for analysis #32

Open
mzfr opened this issue Feb 28, 2021 · 1 comment
Open

Fuzz the intents and try to capture screen for analysis #32

mzfr opened this issue Feb 28, 2021 · 1 comment
Labels

Comments

@mzfr
Copy link
Owner

mzfr commented Feb 28, 2021

This is a weird idea that I have right now so I am just going to write this down for now.

https://twitter.com/B3nac/status/1363343245934284801

b3nac did lot of these streams where he fuzzed deeplinks using radamsa. Maybe we can have a functionality which will just extract all the supported schemes from the manifest and then it will use them to send legit URL etc and capture the screen(using adb).

Ex:

slicer fuzz com.github.android

and it try things like:

github://<PREDEFINED_URL_LIST>

problem here is that I am not sure how to make it smart

@mzfr
Copy link
Owner Author

mzfr commented Feb 28, 2021

Actually I just realized maybe it's not good cause just passing a normal URL to the fuzzer might do the trick

@mzfr mzfr changed the title Capture screen with random inputs Fuzz the intents and try to capture screen for analysis Mar 7, 2021
@mzfr mzfr added the idea label May 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant