AndroidManifest Audit
mobile · easy · +30 XP
Target
GET /api/lab/manifest-hunt-101/manifest (AndroidManifest.xml)
POST /api/lab/manifest-hunt-101/intent body {component, action, extras} (mock am-start)
Goal: find the activity marked android:exported="true" with no permission protection — that activity reads is_admin from intent extras. Send an intent to it with extras={"is_admin": true} and you get the flag.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/manifest-hunt-101/
// reuse on the cli
// submit flag
// no solves yet
2 of 12 · mobile