adb-backup-enabled: ADB Backup Enabled

漏洞描述

ADB Backup is enabled, which allows the backup and restore of an app's private data.

PoC代码[已公开]

id: adb-backup-enabled

info:
  name: ADB Backup Enabled
  author: gaurang
  severity: low
  description: ADB Backup is enabled, which allows the backup and restore of an app's private data.
  remediation: Ensure proper access or disable completely.
  reference:
    - https://adb-backup.com/
  classification:
    cwe-id: CWE-200
  tags: android,file,adb

file:
  - extensions:
      - all
    matchers:
      - type: word
        words:
          - "android:allowBackup=\"true\""
# digest: 4b0a00483046022100a9484460c27fff828435151cc04781a80e657a31895ba5fb6b3f5d5fb85fc603022100e203d7953ac7e51c789029da37ce267d360c24d1c1705543b15bb72142f0d237:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/./file/android/adb-backup-enabled.yaml