mwrlabs/mercury — pull request #5 by luander (2012-05-09 19:17:06+00:00)
Title: Added feature provider -> securityscan

This new feature was added to provider section to scan all the content providers on the phone, find the providers URIs and make a query for each URI. Returns the following result to the client:

When the query is succeeded:
VULNERABLE com.package.name -> uri: content://com.package.authority/
When the query fail:
SAFE com.package.name -> uri: content://com.package.authority/

This result is presented because when the query to the content provider is succesful, means that the provider is open to any application to access, that is a possible VULNERABLE provider. Otherwise, when the query fails, the provider is SAFE and not open to other application.

The performance of this feature, however, is very depleted because the Common.strings function is very slow. This problem is solved applying the patch proposed by rchiossi.