search

huuck / ADBHoney

Low interaction honeypot designed for Android Debug Bridge over TCP/IP
GNU General Public License v3.0
158 stars 33 forks source link

Binary garbage after "file:SEND" #9

Closed bontchev closed 5 years ago

bontchev commented 5 years ago

I've noticed in my logs that reports that contain "file:SEND" contain some kind of binary garbage (4 bytes, I think) immediately after the "SEND". It's not the length of the file. I'm not sure what it is, and it might even be fixed already (e.g., if it is the contents of the uninitialized filename variable) but it probably needs some looking into.

huuck commented 5 years ago

it only happens for some packets. It's not from the uninitialized filename, somebody needs to extract the contents of the filename for certain packet structures (or at least do a ascii encoding with ignoring non standard characters)

huuck commented 5 years ago

Fixed in the latest release.