zoukankan      html  css  js  c++  java
  • Sending SMS And Dialing Numbers without User Consent(Context is not needed)

    Sending SMS And Dialing Numbers without User Consent 

    Sending SMS does not require context or user interaction. A simple call does the job, as shown in following Listing

    SmsManager.getDefault().sendTextMessage(phoneNumber, null , message, null , null);

    In order to make calls from the Javascript bridge without user consent, we can invoke the telephony service to dial numbers directly via binder, as shown in Listing 2, where phone is the remote Android telephony service and the number 2 represents the second remote call. s16 is the type marker represents “16 bit string”, and packageName is the host app’s package name, where we can obtain from the information posted from the ad libraries. The sequence number of the remote calls can be found in the corresponding Android Interface Definition Language (AIDL) files [11]. Many other Android services can be invoked in the same way, including sending SMS. . (通过逆向相应platform的classes.jar,)

    Runtime.getRuntime().exec(”service call phone 2 s16 ” + packageName + ” s16 ” + phoneNumber);
  • 相关阅读:
    Python字符串
    MySQL触发器
    MySQL 1418报错解决办法
    数据库下载
    补码与反码
    二、八、十六进制之间的转换
    this 指向
    作用域 var 词法分析 arguments
    事件绑定的3种方式
    清浮动方法小结
  • 原文地址:https://www.cnblogs.com/rainduck/p/3926385.html
Copyright © 2011-2022 走看看