Enumeration

AndroidManifest.xml

• Review the androidmanifest.xml for activites
• Are they exported?
• What custom permissions are enforced?
• What intent filters are there?
  • Are these protected?

Drozer

run app.activity.info -a com.your.app

Starting an Activity

Drozer

run app.activity.start --component com.your.app com.your.app.ACTIVITY

Optional arguments can be passed with the -flags option

run app.activity.start --component com.your.app.intent com.your.app.intent.activity -flags activiity_task --extra string URL "some text"

ADB

adb shell am start -a android.intent.action.view