Legacy INSTALL_SHORTCUT MAC-leak POC

Open Chrome's overflow menu (⋮) and tap Add to Home screen, then confirm the dialog.

On a device whose default launcher does not support ShortcutManager.requestPinShortcut (and where WebAPK minting is unavailable), Chrome reaches WebappsUtils.addShortcutToHomescreen() → sendBroadcast(INSTALL_SHORTCUT) with the MAC-bearing webapp intent inside. The co-installed MacSniffer app captures it via a runtime-registered receiver and logs EXTRA_URL / EXTRA_MAC, then chains to WebappLauncherActivity.

Watch: adb logcat -s MacSniffer