Create deep link issue in android.yaml

patch-1
Hardik Solanki 2022-12-23 23:29:37 +00:00 committed by GitHub
parent fb0b09d261
commit 18543974de
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 24 additions and 0 deletions

View File

@ -0,0 +1,24 @@
id: deep link issue in android
info:
name: Deep Link Issue in android
author: Hardik-Solanki
severity: Medium
reference:
- https://www.nowsecure.com/blog/2019/04/05/how-to-guard-against-mobile-app-deep-link-abuse/
- https://medium.com/mobis3c/deep-link-exploitation-introduction-open-unvalidated-redirection-b8344f00b17b
- https://www.hackingarticles.in/android-pentest-deep-link-exploitation/
tags: android, file, Intent-filter
file:
- extensions:
- all
matchers-condition: and
matchers:
- type: word
words:
- "android:scheme"
- "android:host"
- "android:name"
condition: and