Try append / to the end of Content URIs when searching for accessible URIs about drozer HOT 6 CLOSED

Nice find. I agree that this should be part of the searching modules but you are not planning to integrate it as part of app.provider.query right?

from drozer.

No, only in modules for discovering content URIs: app.provider.finduri and scanner.provider.{finduris,injection}.

from drozer.

Awesome :)

from drozer.

Why will this kind of permission check bypass happen? I can't quite understand why developer will use a PATH_LITERAL to do checking, may I be told about some example apps of this kind? Thank you very much. @dbradberry

from drozer.

@flankerhqd I have seen this in a couple of apps recently (but can't discuss them now). I guess it's like any security vulnerability - introduced due to a lack of understanding or testing when the app was being developed.

You can find potential candidates with Mercury, by running app.provider.info and looking for anything that specifies a path permission with PATH_LITERAL.

from drozer.

Fixed on develop in cbe4356.

from drozer.