Adb kawaida hupatikana katika:

bash
#Windows
C:\Users\<username>\AppData\Local\Android\sdk\platform-tools\adb.exe

#MacOS
/Users/<username>/Library/Android/sdk/platform-tools/adb

Taarifa iliyopatikana kutoka: http://adbshell.com/

Muunganisho

adb devices

Hii itataja vifaa vilivyounganishwa; ikiwa "isiyothibitishwa" inaonekana, hii inamaanisha kwamba unapaswa kuondoa kizuizi kwenye simu yako na kukubali muunganisho.

Hii inaashiria kwa kifaa kwamba kinapaswa kuanzisha na adb server kwenye bandari 5555:

adb tcpip 5555

Unganisha na IP hiyo na Bandari hiyo:

adb connect <IP>:<PORT>

Ikiwa unapata kosa kama ifuatavyo katika programu ya Virtual Android (kama Genymotion):

adb server version (41) doesn't match this client (36); killing...

Ni kwa sababu unajaribu kuungana na seva ya ADB yenye toleo tofauti. Jaribu tu kutafuta binary ya adb ambayo programu inatumia (nenda kwenye C:\Program Files\Genymobile\Genymotion na tafuta adb.exe)

Vifaa vingi

Wakati wowote unapata vifaa vingi vinavyounganishwa na mashine yako utahitaji kueleza ni kipi unataka kutumia kuendesha amri ya adb.

bash
adb devices
List of devices attached
10.10.10.247:42135	offline
127.0.0.1:5555	device
bash
adb -s 127.0.0.1:5555 shell
x86_64:/ # whoami
root

Port Tunneling

Ikiwa port ya adb inapatikana tu kutoka localhost kwenye kifaa cha android lakini una ufikiaji kupitia SSH, unaweza kupeleka port 5555 na kuungana kupitia adb:

bash
ssh -i ssh_key username@10.10.10.10 -L 5555:127.0.0.1:5555 -p 2222
adb connect 127.0.0.1:5555

Meneja Pakiti

Sakinisha/ondoa

adb install [option] <path>

bash
adb install test.apk

adb install -l test.apk # forward lock application

adb install -r test.apk # replace existing application

adb install -t test.apk # allow test packages

adb install -s test.apk # install application on sdcard

adb install -d test.apk # allow version code downgrade

adb install -p test.apk # partial application install

adb uninstall [options] <PACKAGE>

bash
adb uninstall com.test.app

adb uninstall -k com.test.app Keep the data and cache directories around after package removal.

Packages

Inachapisha pakiti zote, kwa hiari zile tu ambazo jina la pakiti lina maandiko katika <FILTER>.

adb shell pm list packages [options] <FILTER-STR>

bash
adb shell pm list packages <FILTER-STR>

adb shell pm list packages -f <FILTER-STR> #See their associated file.

adb shell pm list packages -d <FILTER-STR> #Filter to only show disabled packages.

adb shell pm list packages -e <FILTER-STR> #Filter to only show enabled packages.

adb shell pm list packages -s <FILTER-STR> #Filter to only show system packages.

adb shell pm list packages -3 <FILTER-STR> #Filter to only show third party packages.

adb shell pm list packages -i <FILTER-STR> #See the installer for the packages.

adb shell pm list packages -u <FILTER-STR> #Also include uninstalled packages.

adb shell pm list packages --user <USER_ID> <FILTER-STR> #The user space to query.

adb shell pm path <PACKAGE>

Chapisha njia ya APK ya iliyotolewa.

bash
adb shell pm path com.android.phone

adb shell pm clear <PACKAGE>

Futa data zote zinazohusiana na kifurushi.

bash
adb shell pm clear com.test.abc

File Manager

adb pull <remote> [local]

Pakua faili maalum kutoka kwa emulator/kipande hadi kompyuta yako.

bash
adb pull /sdcard/demo.mp4 ./

adb push <local> <remote>

Pakia faili maalum kutoka kwa kompyuta yako hadi emulators/kipande.

bash
adb push test.apk /sdcard

Screencapture/Screenrecord

adb shell screencap <filename>

Kuchukua picha ya skrini ya onyesho la kifaa.

bash
adb shell screencap /sdcard/screen.png

adb shell screenrecord [options] <filename>

Kurekodi onyesho la vifaa vinavyotumia Android 4.4 (API level 19) na juu.

bash
adb shell screenrecord /sdcard/demo.mp4
adb shell screenrecord --size <WIDTHxHEIGHT>
adb shell screenrecord --bit-rate <RATE>
adb shell screenrecord --time-limit <TIME> #Sets the maximum recording time, in seconds. The default and maximum value is 180 (3 minutes).
adb shell screenrecord --rotate # Rotates 90 degrees
adb shell screenrecord --verbose

(press Ctrl-C to stop recording)

**Unaweza kupakua faili (picha na video) kwa kutumia **adb pull

Shell

adb shell

Pata shell ndani ya kifaa

bash
adb shell

adb shell <CMD>

Tekeleza amri ndani ya kifaa

bash
adb shell ls

pm

Amri zifuatazo zinafanywa ndani ya shell

bash
pm list packages #List installed packages
pm path <package name> #Get the path to the apk file of tha package
am start [<options>] #Start an activity. Whiout options you can see the help menu
am startservice [<options>] #Start a service. Whiout options you can see the help menu
am broadcast [<options>] #Send a broadcast. Whiout options you can see the help menu
input [text|keyevent] #Send keystrokes to device

Mchakato

Ikiwa unataka kupata PID ya mchakato wa programu yako unaweza kutekeleza:

bash
adb shell ps

Na utafute programu yako

Au unaweza kufanya

bash
adb shell pidof com.your.application

Na itachapisha PID ya programu

Mfumo

bash
adb root

Inarejesha huduma ya adbd na ruhusa za mzizi. Kisha, unapaswa kuungana tena na seva ya ADB na utakuwa mzizi (ikiwa inapatikana)

bash
adb sideload <update.zip>

kuangaza/kurejesha pakiti za Android update.zip.

Magogo

Logcat

Ili kuchuja ujumbe wa programu moja tu, pata PID ya programu na tumia grep (linux/macos) au findstr (windows) kuchuja matokeo ya logcat:

bash
adb logcat | grep 4526
adb logcat | findstr 4526

adb logcat [option] [filter-specs]

bash
adb logcat

Marekebisho: bonyeza Ctrl-C kuacha kufuatilia

bash
adb logcat *:V # lowest priority, filter to only show Verbose level

adb logcat *:D # filter to only show Debug level

adb logcat *:I # filter to only show Info level

adb logcat *:W # filter to only show Warning level

adb logcat *:E # filter to only show Error level

adb logcat *:F # filter to only show Fatal level

adb logcat *:S # Silent, highest priority, on which nothing is ever printed

adb logcat -b <Buffer>

bash
adb logcat -b # radio View the buffer that contains radio/telephony related messages.

adb logcat -b # event View the buffer containing events-related messages.

adb logcat -b # main default

adb logcat -c # Clears the entire log and exits.

adb logcat -d # Dumps the log to the screen and exits.

adb logcat -f test.logs # Writes log message output to test.logs .

adb logcat -g # Prints the size of the specified log buffer and exits.

adb logcat -n <count> # Sets the maximum number of rotated logs to <count>.

dumpsys

dumps data za mfumo

adb shell dumpsys [options]

bash
adb shell dumpsys

adb shell dumpsys meminfo

adb shell dumpsys battery

Marekebisho: Kifaa cha rununu chenye Chaguo za Mendelezo kilichowashwa kinachotumia Android 5.0 au juu.

bash
adb shell dumpsys batterystats collects battery data from your device

Maelezo: Battery Historian inabadilisha data hiyo kuwa uonyeshaji wa HTML. STEP 1 adb shell dumpsys batterystats > batterystats.txt STEP 2 python historian.py batterystats.txt > batterystats.html

bash
adb shell dumpsys batterystats --reset erases old collection data

adb shell dumpsys activity

Backup

Hifadhi kifaa cha android kutoka adb.

bash
adb backup [-apk] [-shared] [-system] [-all] -f file.backup
# -apk -- Include APK from Third partie's applications
# -shared -- Include removable storage
# -system -- Include system Applciations
# -all -- Include all the applications

adb shell pm list packages -f -3      #List packages
adb backup -f myapp_backup.ab -apk com.myapp # backup on one device
adb restore myapp_backup.ab                  # restore to the same or any other device

Ikiwa unataka kukagua maudhui ya nakala:

bash
( printf "\x1f\x8b\x08\x00\x00\x00\x00\x00" ; tail -c +25 myapp_backup.ab ) |  tar xfvz -

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks