drozer icon indicating copy to clipboard operation
drozer copied to clipboard

Outdated busybox is affecting some modules

Open cyberMilosz opened this issue 4 months ago • 0 comments

A few modules currently rely on busybox, namely:

  • shell.send
  • scanner.misc.readablefiles
  • scanner.misc.sflagbinaries
  • scanner.misc.writablefiles

The version of busybox shipped with drozer is an ancient x86 build which doesn't run on most modern devices.

image

It's also unclear why these modules rely on busybox, since the commands needed by the modules above (find, nc) are already present and executable on a reasonably modern non-rooted Android device.

What needs to happen:

  1. Rewrite the modules so they don't require busybox. Maybe use busybox as a fallback?
  2. Rethink how we do busybox - shipping a random compiled binary is less than ideal, but if we must do it, let's at least make sure we're matching the target platform(s)

cyberMilosz avatar Oct 22 '24 08:10 cyberMilosz