Broadcast Receivers

They are responsible for providing you all the notifications that you get. Also sometimes they pass around bits and pieces of information to other/multiple applications.

• run [app.broadcast.info](http://app.broadcast.info) -a <package-name>

• Broadcasts are sent via sendBroadcast() and what will be done on that broadcast will be determined by onReceive() method.

• There are broadcasts receivers that gets registered at runtime so drozer will not report them and you'll have to find them manually.

  • registerReceiver() - This is the method name.

• It's possible that a activity have a intent filter. Now if we pass the intent via a broadcast it's possible that activity might get provoked.

  • Only happens when it's set to exported=True or you have root permission(N/A)

• We can also try to sniff the broadcasts.

  • run app.broadcast.sniff -a <action/intent>