sensepost / sensepost/objection

Intercept FCM/APNs messages

Open
#236 4 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

✨enhancement
Dominant language
Python
Stars
9.4k
Forks
1k
Avg merge
14d 5h
Merged PRs (30d)
1

Description

Is your feature request related to a problem? Please describe.
When an app receives a push notification from Firebase, the onReceive method in the receiver class is called. It would be nice to be able to see what sorts of information was sent in that push notification, including sender/payload/etc. This also applies to APNs, to some extent.

Describe the solution you'd like
An option for Android/iOS to dump the contents of a push notification in a clear, easy-to-read format.

Describe alternatives you've considered
Hooking the onReceive() method manually - the Context object doesn't stringify well, however.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing how Android receiver classes reach onReceive() and how the iOS notification path is exposed. Review the existing mobile instrumentation entry points and determine where FCM and APNs message data can be observed. Done means both platforms can dump push-notification sender and payload information in a clear, readable format.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, ios
Domain
mobile-dev, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.