SAFTest

PoC for SAF

Generate Convert Improve

Install / Use

/learn @MlgmXyysd/SAFTest

About this skill

Quality Score

0/100

README

SAF Test

The app uses a vulnerability of Storage Access Framework to create a file named MLGMXYYSD_SAFTEST.txt in <Internal Storage>/Android/data or <Internal Storage>/Android/obb.

This file lists all the files in the directory.

This kind of behavior will destroy Package visibility introduced in Android 11.

Initially, it was used for Accessing Android/data through SAF in Android R's PoC.

Prebuilt APK in app/release/app-release.apk.

Test

AVD x86_64: Google Play SPP1.210122.020.A3 Android 12 (S Developer Preview 1)
Pixel 4 XL: Material You SPB3.210618.016 Android 12 (Beta 3.1)
OnePlus 8T: Hydrogen OS 11.0.9.9.KB05 Android 11

Related Skills

node-connect

351.4k

Diagnose OpenClaw node connection and pairing failures for Android, iOS, and macOS companion apps

frontend-design

110.7k

Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.

openai-whisper-api

351.4k

Transcribe audio via OpenAI Audio Transcriptions API (Whisper).

qqbot-media

351.4k

QQBot 富媒体收发能力。使用 <qqmedia> 标签，系统根据文件扩展名自动识别类型（图片/语音/视频/文件）。