Description

Detects when an Android application has backups enabled in AndroidManifest.xml without proper restrictions. When backups are enabled, sensitive application data can be extracted through Android's backup system, potentially exposing confidential information to unauthorized parties.

Detection Strategy

• Scans the AndroidManifest.xml file for the android:allowBackup attribute

• Reports a vulnerability if allowBackup is set to 'true' or is not explicitly set (defaults to true)

• Examines the application-level tag in manifest for backup configuration