22 lines
792 B
Bash
22 lines
792 B
Bash
|
#!/usr/bin/env bash
|
|||
|
|
# security_test.sh - 安全校验测试
|
|||
|
|
# 用一个非白名单 sourceApp 投递协议，验证被守卫拦截（文档 §6.2）
|
|||
|
|
# 用法: security_test.sh [fakeSourceApp]
|
|||
|
|
|
|||
|
|
set -e
|
|||
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
|||
|
|
# shellcheck disable=SC1091
|
|||
|
|
source "${SCRIPT_DIR}/lib/common.sh"
|
|||
|
|
|
|||
|
|
require_adb
|
|||
|
|
|
|||
|
|
FAKE_APP="${1:-com.attacker.malicious}"
|
|||
|
|
print_header "安全校验测试（sourceApp=${FAKE_APP}）"
|
|||
|
|
|
|||
|
|
PAYLOAD=$(build_jump_payload FILM \
|
|||
|
|
"filmId=hack-001" \
|
|||
|
|
"filmName=白盒测试片")
|
|||
|
|
|
|||
|
|
send_voice_broadcast "JUMP" "${PAYLOAD}" "$(gen_request_id)" "${FAKE_APP}"
|
|||
|
|
log_ok "投递完成，预期 sourceApp 未在白名单时被丢弃，不回传结果"
|
|||
|
|
log_warn "（如果脚本同时验证 permission 拦截，可执行：adb shell pm list permissions | grep VOICE）"
|