drozer
1 . After the installation files extracting file describes the setup.exe --- installation agent.apk --- for debugging - installed on Android phones use the command 1 . Cd to the installation directory drozer 2 . Adb Devices - to see if the connection is successful 3 . adb forward tcp: 31415 tcp: 31415 - forwarding ports 4 . cd into the directory file drozer open end of the phone Server Embedded drozer Console Connect - enter drozer 5 . RUN app.package.info -a package name --- review the installation package information 6 . RUN app.package.attacksurface package name ---Check opening assembly 7 . Respectively view four components RUN app.activity.info - A com.pccw.ehr RUN app.service.info - A com.pccw.ehr RUN app.broadcast.info - A com.pccw. EHR run app.provider.info - a com.pccw.ehr 8 . perform open component run app.activity.start - the component package name component name ### of some commonly used commands. LS --- View drozer all available modules run app.package.list --- see the names of all the application installation package name on the phone RUN app.pakcage.list -f <keyword> ---- use keywords to find the package name RUN scanner.provider.finduris -a <package Penalty for name> -----Get all accessible Uri RUN scanner.provider.injection -a <Package Penalty for name> --- detect SQL injection RUN scanner.provider.traversal -a <Package Penalty for name> --- detects directory traversal using the package name to view aapt method ( 1 ) into the aapt directory ( 2 ) aapt dump badging test.apk (will come to drag apk file) --- (com.pccw.ehr testing purposes) common error problem solution: 1 .Counld not the Find the Java build named .drozer_config files, add the following: [executables] java = D: \ java \ jdk1. . 7 \ bin \ java.exe javac = D:. \ java \ jdk1 . 7 \ bin \ the javac.exe i.e. java and javac the path, after saving storage to C: \ users \ XXX \ directory, where XXX is the name of the current user directory, and then reconnect, if this document under the win7 .drozer_config can not be named solution: First file name to 1.drozer_config, then use the command the rename 1 .drozer_config can .drozer_config