Skip to content

Files

Latest commit

serek8serek8
Add Risk and Tests for: Sensitive Data Stored Unencrypted in External…
Mar 5, 2024
0bc19a7 · Mar 5, 2024

History

History
37 lines (23 loc) · 1.49 KB

test.md

File metadata and controls

37 lines (23 loc) · 1.49 KB
platform title apis type
android
Storing Data in External Locations
Environment#getExternalStorageDirectory
Environment#getExternalStorageDirectory
Environment#getExternalFilesDir
Environment#getExternalCacheDir
SharedPreferences
FileOutPutStream
dynamic

Overview

Android apps utilize a variety of APIs to obtain a file path and save a file. Collecting a comprehensive list of these APIs can be challenging, especially when an app employs a third-party framework, loads code at runtime, or incorporates native code. Therefore, dynamic testing might be the most effective approach to find writing to the external storage.

Steps

  1. Install the app.

  2. Execute a method trace to spawn an app and log all interactions with files.

  3. Navigate to the screen of the mobile app that you want to analyse.

  4. Close the app to stop frida-trace

Observation

The method trace output contains a list of file locations that your app interacts with. You may need to use adb shell to inspect these files manually.

Evaluation

The test case fails if the files found above are not encrypted and leak sensitive data.

For example, the following output shows sample files that should be manually inspected.

/storage/emulated/0/Android/data/com.example/keys.json
/storage/emulated/0/Android/data/com.example/files/config.xml
/sdcard/secret.txt"