Primer paso de la investigacion. Se aportan el .apk, las carpetas con el apk extraido y el apk descompilado. El archivo API_DOCUMENTATION.md es un archivo donde se anotaran los descubrimientos del funcionamiento de la API, y los .py son scripts para probar la funcionalidad de la API con los métodos que vayamos encontrando. Finalmente, los archivos .js son scripts de Frida para extraer informacion de la APP durante la ejecucion.
This commit is contained in:
440
apk_decompiled/resources/AndroidManifest.xml
Normal file
440
apk_decompiled/resources/AndroidManifest.xml
Normal file
@@ -0,0 +1,440 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
|
||||
android:versionCode="72"
|
||||
android:versionName="2.1.0"
|
||||
android:compileSdkVersion="35"
|
||||
android:compileSdkVersionCodename="15"
|
||||
package="com.adif.elcanomovil"
|
||||
platformBuildVersionCode="35"
|
||||
platformBuildVersionName="15">
|
||||
<uses-sdk
|
||||
android:minSdkVersion="29"
|
||||
android:targetSdkVersion="35"/>
|
||||
<uses-permission android:name="android.permission.INTERNET"/>
|
||||
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
|
||||
<uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION"/>
|
||||
<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION"/>
|
||||
<uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
|
||||
<uses-permission android:name="com.google.android.gms.permission.AD_ID"/>
|
||||
<queries>
|
||||
<intent>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="https"/>
|
||||
</intent>
|
||||
<intent>
|
||||
<action android:name="android.intent.action.SEND"/>
|
||||
<data android:scheme="https"/>
|
||||
</intent>
|
||||
<package android:name="com.google.android.apps.maps"/>
|
||||
</queries>
|
||||
<uses-permission android:name="android.permission.CAMERA"/>
|
||||
<uses-feature
|
||||
android:glEsVersion="0x20000"
|
||||
android:required="true"/>
|
||||
<uses-permission android:name="android.permission.WAKE_LOCK"/>
|
||||
<uses-permission android:name="com.google.android.c2dm.permission.RECEIVE"/>
|
||||
<uses-permission android:name="com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE"/>
|
||||
<permission
|
||||
android:name="com.adif.elcanomovil.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION"
|
||||
android:protectionLevel="signature"/>
|
||||
<uses-permission android:name="com.adif.elcanomovil.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION"/>
|
||||
<application
|
||||
android:theme="@style/SplashScreenTheme"
|
||||
android:label="@string/app_name_label"
|
||||
android:icon="@mipmap/ic_launcher"
|
||||
android:name="com.adif.elcanomovil.ElcanoApplication"
|
||||
android:allowBackup="false"
|
||||
android:hardwareAccelerated="true"
|
||||
android:supportsRtl="true"
|
||||
android:extractNativeLibs="false"
|
||||
android:usesCleartextTraffic="false"
|
||||
android:roundIcon="@mipmap/ic_launcher_round"
|
||||
android:appComponentFactory="androidx.core.app.CoreComponentFactory"
|
||||
android:requestLegacyExternalStorage="true">
|
||||
<meta-data
|
||||
android:name="com.google.android.geo.API_KEY"
|
||||
android:value="AIzaSyDIzMtgIKRHGwmOFihX_--ftSeMLjwF3cY"/>
|
||||
<activity
|
||||
android:name="com.adif.elcanomovil.main.MainActivity"
|
||||
android:exported="true"
|
||||
android:launchMode="singleInstance"
|
||||
android:windowSoftInputMode="adjustPan">
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data
|
||||
android:scheme="https"
|
||||
android:host="adif.page.link"/>
|
||||
<data
|
||||
android:scheme="https"
|
||||
android:host="adifpreproduccion.page.link"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.MAIN"/>
|
||||
<category android:name="android.intent.category.LAUNCHER"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/home"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/departures"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/station"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/moreAdif"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/selectTrain"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/favourites"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/avisa"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/avisaIncidenceDetails"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/subscriptionDetails"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/trainDetails"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/favourites"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/avisa"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/avisaIncidenceDetails"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/subscriptionDetails"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.VIEW"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
<category android:name="android.intent.category.BROWSABLE"/>
|
||||
<data android:scheme="adifmovil"/>
|
||||
<data android:host="app"/>
|
||||
<data android:path="/trainDetails"/>
|
||||
</intent-filter>
|
||||
</activity>
|
||||
<activity
|
||||
android:label="WizardActivity"
|
||||
android:name="com.adif.elcanomovil.uiMoreAdif.wizard.WizardActivity"
|
||||
android:exported="false"
|
||||
android:screenOrientation="portrait">
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.MAIN"/>
|
||||
<category android:name="android.intent.category.DEFAULT"/>
|
||||
</intent-filter>
|
||||
</activity>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.messaging.default_notification_icon"
|
||||
android:resource="@drawable/ic_adif_logo_simple"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.messaging.default_notification_color"
|
||||
android:resource="@color/colorPrimary"/>
|
||||
<meta-data
|
||||
android:name="com.adif.elcanomovil.notifications.AppFirebaseMessagingService"
|
||||
android:value="@string/default_notification_channel_id"/>
|
||||
<service
|
||||
android:name="com.adif.elcanomovil.notifications.AppFirebaseMessagingService"
|
||||
android:exported="false">
|
||||
<intent-filter>
|
||||
<action android:name="com.google.firebase.MESSAGING_EVENT"/>
|
||||
</intent-filter>
|
||||
</service>
|
||||
<receiver
|
||||
android:name="com.adif.elcanomovil.widget.DeparturesWidget"
|
||||
android:exported="true">
|
||||
<intent-filter>
|
||||
<action android:name="android.intent.action.MY_PACKAGE_REPLACED"/>
|
||||
<action android:name="android.intent.action.BOOT_COMPLETED"/>
|
||||
<action android:name="android.intent.action.QUICKBOOT_POWERON"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="android.appwidget.action.APPWIDGET_UPDATE"/>
|
||||
</intent-filter>
|
||||
<meta-data
|
||||
android:name="android.appwidget.provider"
|
||||
android:resource="@xml/departures_widget_info"/>
|
||||
</receiver>
|
||||
<activity
|
||||
android:name="com.adif.elcanomovil.widget.DeparturesWidgetConfigureActivity"
|
||||
android:exported="false">
|
||||
<intent-filter>
|
||||
<action android:name="android.appwidget.action.APPWIDGET_CONFIGURE"/>
|
||||
</intent-filter>
|
||||
</activity>
|
||||
<provider
|
||||
android:name="androidx.core.content.FileProvider"
|
||||
android:exported="false"
|
||||
android:authorities="com.adif.elcanomovil.provider"
|
||||
android:grantUriPermissions="true">
|
||||
<meta-data
|
||||
android:name="android.support.FILE_PROVIDER_PATHS"
|
||||
android:resource="@xml/file_paths"/>
|
||||
</provider>
|
||||
<provider
|
||||
android:name="androidx.startup.InitializationProvider"
|
||||
android:exported="false"
|
||||
android:authorities="com.adif.elcanomovil.androidx-startup">
|
||||
<meta-data
|
||||
android:name="androidx.emoji2.text.EmojiCompatInitializer"
|
||||
android:value="androidx.startup"/>
|
||||
<meta-data
|
||||
android:name="androidx.lifecycle.ProcessLifecycleInitializer"
|
||||
android:value="androidx.startup"/>
|
||||
<meta-data
|
||||
android:name="androidx.profileinstaller.ProfileInstallerInitializer"
|
||||
android:value="androidx.startup"/>
|
||||
</provider>
|
||||
<uses-library
|
||||
android:name="org.apache.http.legacy"
|
||||
android:required="false"/>
|
||||
<service
|
||||
android:name="com.google.firebase.components.ComponentDiscoveryService"
|
||||
android:exported="false"
|
||||
android:directBootAware="true">
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.messaging.ktx.FirebaseMessagingLegacyRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.messaging.FirebaseMessagingKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.messaging.FirebaseMessagingRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.dynamiclinks.ktx.FirebaseDynamicLinksLegacyRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.dynamiclinks.FirebaseDynamicLinksKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.dynamiclinks.internal.FirebaseDynamicLinkRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.storage.ktx.FirebaseStorageKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.storage.StorageRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.remoteconfig.ktx.FirebaseConfigLegacyRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.crashlytics.FirebaseCrashlyticsKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.crashlytics.CrashlyticsRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.analytics.ktx.FirebaseAnalyticsKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.remoteconfig.FirebaseRemoteConfigKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.remoteconfig.RemoteConfigRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.sessions.FirebaseSessionsRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.analytics.connector.internal.AnalyticsConnectorRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.installations.FirebaseInstallationsKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.installations.FirebaseInstallationsRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.ktx.FirebaseCommonLegacyRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.FirebaseCommonKtxRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.abt.component.AbtRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
<meta-data
|
||||
android:name="com.google.firebase.components:com.google.firebase.datatransport.TransportRegistrar"
|
||||
android:value="com.google.firebase.components.ComponentRegistrar"/>
|
||||
</service>
|
||||
<receiver
|
||||
android:name="com.google.firebase.iid.FirebaseInstanceIdReceiver"
|
||||
android:permission="com.google.android.c2dm.permission.SEND"
|
||||
android:exported="true">
|
||||
<intent-filter>
|
||||
<action android:name="com.google.android.c2dm.intent.RECEIVE"/>
|
||||
</intent-filter>
|
||||
<meta-data
|
||||
android:name="com.google.android.gms.cloudmessaging.FINISHED_AFTER_HANDLED"
|
||||
android:value="true"/>
|
||||
</receiver>
|
||||
<service
|
||||
android:name="com.google.firebase.messaging.FirebaseMessagingService"
|
||||
android:exported="false"
|
||||
android:directBootAware="true">
|
||||
<intent-filter android:priority="-500">
|
||||
<action android:name="com.google.firebase.MESSAGING_EVENT"/>
|
||||
</intent-filter>
|
||||
</service>
|
||||
<activity
|
||||
android:theme="@android:style/Theme.Translucent.NoTitleBar"
|
||||
android:name="com.google.android.gms.common.api.GoogleApiActivity"
|
||||
android:exported="false"/>
|
||||
<service
|
||||
android:name="com.google.firebase.sessions.SessionLifecycleService"
|
||||
android:enabled="true"
|
||||
android:exported="false"/>
|
||||
<provider
|
||||
android:name="com.google.firebase.provider.FirebaseInitProvider"
|
||||
android:exported="false"
|
||||
android:authorities="com.adif.elcanomovil.firebaseinitprovider"
|
||||
android:initOrder="100"
|
||||
android:directBootAware="true"/>
|
||||
<receiver
|
||||
android:name="com.google.android.gms.measurement.AppMeasurementReceiver"
|
||||
android:enabled="true"
|
||||
android:exported="false"/>
|
||||
<service
|
||||
android:name="com.google.android.gms.measurement.AppMeasurementService"
|
||||
android:enabled="true"
|
||||
android:exported="false"/>
|
||||
<service
|
||||
android:name="com.google.android.gms.measurement.AppMeasurementJobService"
|
||||
android:permission="android.permission.BIND_JOB_SERVICE"
|
||||
android:enabled="true"
|
||||
android:exported="false"/>
|
||||
<service
|
||||
android:name="androidx.room.MultiInstanceInvalidationService"
|
||||
android:exported="false"
|
||||
android:directBootAware="true"/>
|
||||
<uses-library
|
||||
android:name="androidx.window.extensions"
|
||||
android:required="false"/>
|
||||
<uses-library
|
||||
android:name="androidx.window.sidecar"
|
||||
android:required="false"/>
|
||||
<meta-data
|
||||
android:name="com.google.android.gms.version"
|
||||
android:value="@integer/google_play_services_version"/>
|
||||
<service
|
||||
android:name="androidx.core.widget.RemoteViewsCompatService"
|
||||
android:permission="android.permission.BIND_REMOTEVIEWS"/>
|
||||
<receiver
|
||||
android:name="androidx.profileinstaller.ProfileInstallReceiver"
|
||||
android:permission="android.permission.DUMP"
|
||||
android:enabled="true"
|
||||
android:exported="true"
|
||||
android:directBootAware="false">
|
||||
<intent-filter>
|
||||
<action android:name="androidx.profileinstaller.action.INSTALL_PROFILE"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="androidx.profileinstaller.action.SKIP_FILE"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="androidx.profileinstaller.action.SAVE_PROFILE"/>
|
||||
</intent-filter>
|
||||
<intent-filter>
|
||||
<action android:name="androidx.profileinstaller.action.BENCHMARK_OPERATION"/>
|
||||
</intent-filter>
|
||||
</receiver>
|
||||
<service
|
||||
android:name="com.google.android.datatransport.runtime.backends.TransportBackendDiscovery"
|
||||
android:exported="false">
|
||||
<meta-data
|
||||
android:name="backend:com.google.android.datatransport.cct.CctBackendFactory"
|
||||
android:value="cct"/>
|
||||
</service>
|
||||
<service
|
||||
android:name="com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService"
|
||||
android:permission="android.permission.BIND_JOB_SERVICE"
|
||||
android:exported="false"/>
|
||||
<receiver
|
||||
android:name="com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver"
|
||||
android:exported="false"/>
|
||||
</application>
|
||||
</manifest>
|
||||
Reference in New Issue
Block a user