Android Deep Link QR Generator Module #20668
Open
+261
−0
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…e options - Updated module usage comments for clarity and conciseness - Integrated a comprehensive list of deep link schemes into DEEPLINK_SCHEME options - Removed redundant @list_of_deeplink variable after integrating its contents into OptEnum
…e options - Updated module usage comments for clarity and conciseness - Integrated a comprehensive list of deep link schemes into DEEPLINK_SCHEME options - Removed redundant @list_of_deeplink variable after integrating its contents into OptEnum
Create QR codes that trigger app actions when scanned, useful for testing deep link vulnerabilities and social engineering scenarios across popular apps.
10 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What this PR does
Adds an auxiliary module that generates QR codes containing Android deep links for security testing. When scanned, these QR codes trigger specific actions in mobile applications, allowing security researchers to test for deep linking vulnerabilities and social engineering scenarios across 5+ popular apps.
Verification Steps
./msfconsoleuse auxiliary/generator/android_deeplinkset DEEPLINK_SCHEME weixin://(or any supported scheme)set DEEPLINK_PATH dl/scanqr?type=qr(or custom path)set FILENAME test_qr.pngset SIZE 400runSupporting Information
This module helps test:
Note: This is my first contribution to auxiliary modules, I'm still learning, so please point out any areas for improvement. I understand if this needs more work and appreciate any feedback to help me contribute better and........ please don't kill me.
Refer: #20666