drozer
drozer copied to clipboard
Outdated busybox is affecting some modules
A few modules currently rely on busybox, namely:
-
shell.send
-
scanner.misc.readablefiles
-
scanner.misc.sflagbinaries
-
scanner.misc.writablefiles
The version of busybox shipped with drozer is an ancient x86 build which doesn't run on most modern devices.
It's also unclear why these modules rely on busybox, since the commands needed by the modules above (find
, nc
) are already present and executable on a reasonably modern non-rooted Android device.
What needs to happen:
- Rewrite the modules so they don't require busybox. Maybe use busybox as a fallback?
- Rethink how we do busybox - shipping a random compiled binary is less than ideal, but if we must do it, let's at least make sure we're matching the target platform(s)