Application A calls application B and launches one of its pages. Now we want to get what data application A passed to application B. We don’t need root permissions or system permissions. We can use the fake application method to solve the problem and create a fake application B to deceive. Just apply A, as follows:
First use the application recorder to see which class is started by application B, then use as to create an app with the same package name as application B, and then create an Activity with the same path as the class name of application B and set exported to true. Uninstall application B, install your own application, and then manually implement this process with application A. Application A will start our application, getIntent in the onCreate method of Activity, traverse the bundle, obtain uri and other fields, and print out all the data, that is What A is trying to convey. This method must ensure that application B can be uninstalled, and the activity does not have signature permissions set.