Broadcast receivers

Búsqueda de broadcast receivers con exportación habilitada

# AndroidManifest.xml
## explícitamente
grep "<receiver" app-decompiled/AndroidManifest.xml | grep "android:exported=\"true\""
## implícitamente
grep "<intent-filter" -B 1 app-decompiled/AndroidManifest.xml | grep "<receiver" | grep --invert-match "android:exported=\"true\""

Interacción general con broadcast receivers

# Android Debug Bridge (adb)
adb shell am broadcast -a <action> --es <parameter> "<string-value>" --ei <parameter> <numerical-value>
adb shell am broadcast -a <action> -n <app-package-name>/.<broadcast-receiver> --es <parameter> "<string-value>" --ei <parameter> <numerical-value>

# Drozer
run app.broadcast.send --action <action> --component <app-package-name> <broadcast-receiver> --extra string <parameter> <numerical-value> --extra string <parameter> "<string-value>"