https://developer.android.com/reference/android/content/SharedPreferences

Shared Preferences

Developer can save data into the storage in the format of Key-Value pairs file, the file is located in /data/data/application-name/shared-prefs . It's proted with UID and GUID but if you have root you can just browse to it.

A developer will invoke the shared preferences using the following methods:

Exploiting

Exploit it by browsing to the application folder and via the xml file, may contain sensitive information.