Description

Detects when an Android application has debugging enabled in its manifest configuration. Having debugging enabled in production releases poses a security risk as it allows attackers to attach debuggers and inspect/modify application behavior at runtime.

Detection Strategy

• Examines the AndroidManifest.xml file of the APK

• Checks if the android:debuggable attribute is set to true in the application tag

• Reports a vulnerability if debugging is explicitly enabled in the manifest