Búsqueda de services con exportación habilitada
# AndroidManifest.xml
## explícitamente
grep "<service" app-decompiled/AndroidManifest.xml | grep "android:exported=\"true\""
## implícitamente
grep "<intent-filter" -B 1 app-decompiled/AndroidManifest.xml | grep "<service" | grep --invert-match "android:exported=\"true\""
# Drozer
run app.service.info -a <app-package-name>
Interacción general con services
# Android Debug Bridge (adb)
adb shell am startservice <app-package-name>/.<service>
adb shell am startservice -n <app-package-name>/.<service> -e <parameter> "<string-value>"
# Drozer
run app.service.send <app-package-name> <app-package-name>.<service> --msg <what> <arg1> <arg2>