Questions tagged [android]
Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at android.stackexchange.com.
1,373
questions
1
vote
0
answers
174
views
Gmail app on Android can't send messages since months
I've got the issue that the Gmail app on Android (OnePlus One device) is unable to send messages (it stays in Outbox instead of Sent). Once in the past, I've solved this by clearing the Gmail app ...
3
votes
0
answers
1k
views
I want to track my android phone using IMEI [closed]
My phone was stolen last week. I went to the police to track it but still now no result.
What software can I use to track my device just using the IMEI of the phone?
26
votes
6
answers
13k
views
Spying on a smartphone remotely by the authorities: feasibility and operation
French lawmakers agreed to a justice reform bill that includes a provision granting police the power to remotely activate suspects' geolocation, microphone and camera (source).
Following the senators, ...
1
vote
0
answers
108
views
In Google account, a suspicious Android Galaxy Tab device is persistent to revoking
I have a Galaxy Tab device, but have already signed out from it and reset the tab to factory.
However, in my Google account, there is still a device of "Galaxy Tab", added 200+ days ago, in ...
2
votes
1
answer
605
views
Are emulators isolated from the host for malware testing?
I know that virtualization is different from emulation; I was wondering if emulation is isolated from its host and any destruction on it will not affect the host as if it were a virtual machine.
I ...
3
votes
2
answers
3k
views
What is Trusted Credentials in mobile phones?
My phone is encrypted and i was just playing with the configuration and just found a Trusted Credentials that got me curious on what it is and specially in one called Government Root Certification ...
1
vote
0
answers
121
views
How to pentest apps running on HarmonyOS
I could not find any checklist for pentesting apps on HarmonyOS. I know HarmonyOS is based on Android, and all Android applications work on HarmonyOS if I use hms instead of gms. So would an Android ...
18
votes
2
answers
6k
views
How is Xiaomi changing my browser home page?
I have recently observed that the home page of Google Chrome on my Xiaomi Android phone has been altered to a website called "Mintnav". I did not update any software. How is Xiaomi able to ...
1
vote
0
answers
109
views
Different types of USB charger attacks that work on Android phones
I'm wondering about different types of malicious USB charger attacks that work on Android devices when USB debugging option is disabled and if the USB option is set to "charge only".
I'm not ...
0
votes
1
answer
96
views
Detect invalid cert Android client if URL being redirected to a fake server [duplicate]
Here is the scenario:
Server A is an authentic server (A.com).
Server F is a fake server (F.com) that also has a valid cert for
F.com has a copy of A.com certificate to it (to fake as A.com).
Client ...
1
vote
0
answers
219
views
Which is safer - using the sql_conn Flutter package or using a web server as a middle layer for requests against a SQL Server database?
We are currently working on setting up new Android handheld devices (RF guns) to read/write to our SQL Server 2019 database and are at a fork in the road in deciding what to do. Both options below ...
1
vote
1
answer
227
views
Can mobile hardware have backdoor access to camera, microphone that bypasses operating system?
I found out about AOSP variants such as Calyx, Graphene, etc. They promise increased security. I want to know if hardware backdoors can allow access to the camera, microphone, etc. and subsequently ...
1
vote
1
answer
162
views
Malware infection to wifi router from android phone
Suppose a wifi router has strong admin password, updated firmware and no vulnurability then -
Is the router safe from malware infection from android phones connected to it?
Can malware from an ...
1
vote
0
answers
122
views
Is filling the internal storage of an Android device using `dd` sufficient for data removal?
I have a rooted phone I'm willing to sell, but I had Personally Identifiable Information (PII) on it and I am questioning whether filling the internal storage with null bytes using dd would be ...
1
vote
1
answer
371
views
Vulnerability scanning on target Android device
Is there an nmap vulnerability scanning script (vuln, vulscan, nmap-vulners etc) for scanning target Android devices on the network?
If not, is there any specific scanning tool that scans for CVE on ...
0
votes
2
answers
1k
views
How to find external ip address a payload uses to connect back to the attacker?
I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk.
I used apktool to decompile the file and collect some information about the ...
1
vote
0
answers
20
views
How do end-to-end encryption (E2EE) IM apps implementing push notifications? [duplicate]
Say WhatsApp and Signal on Android devices, how do they keep the E2EE not be broken?
Some answers claimed that WhatsApp uses VoIP background mode on iOS to make the push notification invoke the app to ...
1
vote
1
answer
227
views
Storage access permissions before initial unlock upon startup
How do Android devices (at least all the non-enterprise personal devices I remember owning) display the wallpaper (usually chosen from the 'downloads' folder) on the lock screen when it first is ...
1
vote
0
answers
88
views
Is Android SOS being used as privilege escalation or settings bypass?
I have been getting random SOS countdowns triggered on my phone. Every time this happens, a pop-up appears telling me that unknown numbers have been temporarily unblocked. The most recent instance was ...
2
votes
2
answers
1k
views
Heartbleed check for mobile and mobile apps
I have run a heartbleed detector from Lookout on my Android phone. It says:
The version of openSSL is affected by the heartbleed bug but the
vulnerable behaviour is not enabled.
What does it ...
13
votes
4
answers
27k
views
Intercept data sent via bluetooth
I am trying to re-write a closed-source application, originally deployed on mobile devices, that lets you command and control a certain type of mechanical robots via bluetooth.
The new application I ...
1
vote
2
answers
398
views
Is Zircon kernel (from Fuchsia OS) safer by being a microkernel?
Fuchsia's possible Android replacement uses the Zircon microkernel. This means that the drivers should run in userspace.
Is this an advantage over Android? For example, closed source drivers now can't ...
2
votes
4
answers
880
views
End-to-end encryption with multiple recipients?
As far as I understand, end-to-end encryption is used to encrypt the content on the client (sender), send it to the server and decrypt it on the client (recipient). The clients store their private ...
2
votes
2
answers
1k
views
Steps after accidentally opening malicious URL with Android device
So I opened a malicious URL with my Android phone. It took some 20 seconds to dawn on me after which I put it on airplane mode. I didn't enter any info in the meanwhile.
I tried to see if I can assess ...
0
votes
0
answers
2k
views
Bypassing SSL pinning Using Frida issue
I am a penetration tester, and I was doing some SSL pinning bypass using Frida.
I have pushed all the required files and certificates, and burp is intercepting traffic from the Android Studio ...
2
votes
0
answers
141
views
Is a mobile phone number in itself an information that can be utilized by hackers etc? [duplicate]
I recently installed Tinder, and I saw that the app warns about sharing your phone number to avoid being hacked.
I also noticed certain obviously fake profiles pressing for getting a phone number or ...
1
vote
0
answers
179
views
I'm receiving text messages that my family didn't send
Lately I've been receiving text messages from family members that they did not send. All 4 family members and I are a part of the SMS group where we send and receive messages related to our family.
...
1
vote
0
answers
424
views
Are drive-by downloads and installs a significant threat to an average modern Android or Firefox for Windows user?
Today I learned that drive-by downloads and drive-by installations are or have been a thing. Yet there's something very counterintuitive about them if considered a real threat for modern smartphone or ...
0
votes
2
answers
2k
views
Is it possible for my ISP to hack into my android phone?
Is it possible for my ISP or cellular provider that provides data on a 3g or 4g network to hack into or install malware on my brand new Android phone and read my messages on WhatsApp?
2
votes
1
answer
2k
views
How to decode bluetooth traffic to Android app? [closed]
I'm trying to decode a WM-Bus (smartmeter) frame. Here is what the situation looks like:
I have:
a water meter
device to read that meter (wm-bus <-> bluetooth)
Android application which ...
1
vote
0
answers
199
views
Are Android Bluetooth file transfers encrypted?
Suppose I pair two Android phones together using Bluetooth and transfer a file from the first phone to the second by sharing the file using Bluetooth. Does Android encrypt the file transfer so that no ...
1
vote
1
answer
231
views
Is a short password good enough if the phone has the "auto factory reset after 15 lockscreen password errors" feature on?
My Samsung Galaxy phone has a feature named "auto factory reset," by which (according to the blurb in the device's settings) this happens:
After 15 incorrect attempts to unlock
your phone, ...
0
votes
2
answers
150
views
As long as an Android device does not get rooted, is it safe to assume that the main phone app has not been modified?
From a forensics standpoint, is there any technical possibility that WITHOUT rooting the device the potential cybercriminal used a manipulated system phone app to have hidden functionalities like ...
0
votes
0
answers
127
views
ISP-restricted VPN on Android
How to connect to VPN service on Android via its app if it's restricted by state ISPs, but you're able to connect via cloud VPS network outside the state
My idea is about concepts in general:
you ...
15
votes
4
answers
6k
views
Skype called someone and connected to them with no action on my part. What do I do?
This happened to me today, September 12, at about 6pm. Any ideas about what happened, what's going on, and what I should do?
I was at home alone with my 2 year old -- I was feeding her dinner. All of ...
2
votes
1
answer
333
views
Security of Trusty OS (TEE) Non-Secure World API
Recently I learned about TEE in Android, Trusty OS and its internals. I read through the articles on source.android.com and there is one thing I did not find there.
Trusty OS has its own API which ...
1
vote
0
answers
633
views
Cannot aireplay-ng deauth attack Android 11
I was trying to do a deauth attack on Android 11 phone but it didn't work. I am using
sudo aireplay-ng --deauth 100000 -a [AP mac_addr] -c [my mac_addr] wlan0
The access point uses wpa2 encryption, ...
14
votes
1
answer
3k
views
SSL issue captures Facebook app send out traffic
I tried to capture the send-out traffic of the Android app (Google Drive, Facebook, etc.). This is my security thesis.
I succeed capture send-out traffic on the Google Drive app with Mitmproxy but ...
2
votes
1
answer
182
views
MSTG-ARCH-3 What means?
In the OWASP Mobile Application Security Checklist there is a requirement called MSTG-ARCH-3 which describes:
"A high-level architecture for the mobile app and all connected remote
services has ...
1
vote
1
answer
217
views
Mobile authentication
I'm currently working on an Android app in which I want to authenticate someone against an REST API. I want to do this as secure as is (cost-)effective/possible/user friendly.
I've been looking around ...
0
votes
1
answer
454
views
Safest way to open PDFs on Android and iOS?
I was checking out Qubes' way of creating safe PDFs, but unless you use Qubes as a daily driver (and use DispVMs to open PDFs) it's still not viable to just use it to create image-based PDFs if you ...
7
votes
2
answers
3k
views
Intercepting and reading SSL traffic generated by Android
I am trying to use my PC to capture, decrypt and analyse traffic from SSL sessions on my android tablet. So far, I have a ZAP proxy server set up, with a CA generated. On my android device, I have ...
1
vote
1
answer
236
views
How does a non technical user/beginner vet Android apps to ensure they are safe?
Background
I moved from ios to Android so now can't rely on Apple doing some checks on the apps.
I was told that Google does some automated checks and if you buy/download apps from large organisations,...
1
vote
1
answer
305
views
FIDO2 - Where do Android and IOS platform authenticators store private key credentials?
I'm new to FIDO2 specification.
I'm aware that Android and IOS devices support FIDO2 protocols (even Android phones could act as a physical key for FIDO2 authentication).
However, Could anyone let me ...
24
votes
4
answers
24k
views
Verifying android application integrity from server side
I have android applications (Mobile banking) that connect to my server and do online transactions (via Internet/USSD/SMS), I want to make sure those clients are not tampered with and are the original ...
0
votes
1
answer
251
views
Does SS7 attack cause malicious apps to install on your phone?
After watching a video course about SS7 attacks and remote control flaws through WiFi adapters of smartphones, a question comes to my mind:
If an adversary can intercept your SS7 traffic and relate it ...
2
votes
0
answers
203
views
Metasploit Meterpreter how to restore/create new session? [closed]
I created an apk for Android with Metasploit. Started with host ip and port and opened the "receiver terminal"
A lot of things worked well when executing the apk but after some time the ...
0
votes
1
answer
508
views
Is having hard-coded API keys such as the SafetyNet API key considered a vulnerability?
I have a scenario where the developers are using SafetyNet API to protect their Android apps. I observed that the SafetyNet API key has been hard-coded within the apk file. This is the first time I ...
3
votes
2
answers
14k
views
Are Android phones now encrypted by default?
I remember ten years ago in Android I would go to settings - encrypt disk - to protect all my data. That was different to a screen lock password.
However, I just bought a new Samsung Galaxy A23 phone ...
0
votes
1
answer
212
views
Can flash drive infect Android and then the Android infect Windows PC?
I found a flash drive outside my home. Thinking one of my neighbors might have dropped it and wanting to return to them (but still wanting to be cautious), I (stupidly) plugged it into an old Android ...