Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to learn how to detect and write exploits for the Android OS. I am a bit familiar with Linux and have some knowledge in scripting in ruby and python. I had learnt how to write Exploits for basic buffer overflows and SEH. However I am finding very little material for finding and writing Android Exploits. Any ideas?

share|improve this question

closed as too broad by Adi, Xander, NULLZ, AviD Aug 4 '13 at 14:23

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

Found a few presentations by googling. Maybe some of these may help or get you started. Most android devices are ARM based so resources on ARM assembly/ shellcodes may also be useful. Hope it helps some.

Popping Shell on Android

Shellcode on ARM

share|improve this answer
Thanks for these interesting articles...Is there no definitive guide or documentation available? like for Windows/Linux Exploits – user2405966 Aug 4 '13 at 2:43
like @tylerl said at the core Android is a stripped down linux kernel with a different middleware layer. I don't know of a be all end all guide. Looking into ARM assembly and exploits for Linux on ARM should get you headed in the right direction though even though the hardware varies most devices run on ARM. There are projects that are working towards running android on x86 too so that might also be something to keep in mind. – dudebrobro Aug 4 '13 at 11:21

Android is just a Linux with a fancy user interface and a custom Java VM. All the same principles and all the same exploits still apply. Most Android exploits are just re-purposed Linux exploits slightly modified to suit the hardware or software found on the phone.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.