Vulnerabilities
Quick scan
MobSF to scan APK files
Grab APKs
APKs can be found and download in
Android Manifest
In AndroidManifest.xml look for activities that are exported, those activities can be called by another apps
exported=true
Activities that use intent-filter are implicitly exported
<intent-filter>
# implicitly exported activity
</intent-filter>
Adb commands
Send intent data to Activity
adb shell am start -n <package> --es <intent_param> <intent_value>
Running deeplinks
adb shell am start -d "schema://action?parameter=https://caon.io"