Skip to content

Fuzz the intents and try to capture screen for analysis #32

@mzfr

Description

@mzfr

This is a weird idea that I have right now so I am just going to write this down for now.

https://twitter.com/B3nac/status/1363343245934284801

b3nac did lot of these streams where he fuzzed deeplinks using radamsa. Maybe we can have a functionality which will just extract all the supported schemes from the manifest and then it will use them to send legit URL etc and capture the screen(using adb).

Ex:

slicer fuzz com.github.android

and it try things like:

github://<PREDEFINED_URL_LIST>

problem here is that I am not sure how to make it smart

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions