Questions tagged [android]

Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at android.stackexchange.com.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Prevent unsolicited/malicious app install on Android [migrated]

Recently I noticed I have opera browser installed. I definitely did not install it because I was sleeping at that time. I checked installation time and revealed it was the day before yesterday ...
-1
votes
0answers
26 views

Android: How to capture packets of an Android device?

For my university project, I need to find out IPs and ports used by an application. I tried Wireshark for packet capturing as my device and machine is on local network, but it isn't showing packets ...
0
votes
2answers
53 views

Protective steps to prevent files sent through WhatsApp from installing malware

I have been reading articles about exploits which allows someone to send an MP4, PDF or other file type through WhatsApp or other service, which self-executes to install malware without any user click ...
0
votes
0answers
93 views

Is it possible to package all data on a user's phone and send it to the attacker? [closed]

I'm working on a school project. Is it possible to embed malware in an application? What I have in mind is to clone all the user files and send them to a db or somewhere else. I would also prefer if ...
-1
votes
2answers
119 views

Uniquely identify each mobile phone of Android 10 / 9 and below

Background: I have an Android APP with millions of users, but some users are malicious users (robot, fake, privilege escaped, etc). The common solution is to detect & block those "bad" accounts ...
0
votes
1answer
31 views

Android app backup enabled : does it need root? [closed]

I'm doing bug bounty on an android app and I reported an app that have allowBackup to true. The program told me that it's not an issue because it need root. Is it true ? I don't have a non-rooted ...
4
votes
1answer
124 views

Certficate pinning: should I pin the leaf or intermediate?

I'm following this article : Android Security: SSL Pinning to implement certificate pinning in Android using OkHttp. As our app clients do not update their app regulary I don't want to take the risk ...
1
vote
1answer
32 views

Is a debuggable android application exploitable from another application?

I know that if an application set debuggable to true in the manifest a user with physical access can debug the application and get access to the private directory of the debuggable application. But ...
0
votes
1answer
113 views

Is Android encryption secure? [duplicate]

As far as I know Android (Pie) is encrypted by default with some hardware-based password. But how secure is this encryption? I am not talking about password compromise, but if somebody gets my phone,...
0
votes
0answers
58 views

msfvenom: backdoored apk

I am using msfvenom to backdoor an Android apk. It is supposed that msfvenom adds extra permissions to original AndroidManifest: [*] Poisoning the manifest with meterpreter permissions.. [*] Adding &...
1
vote
0answers
58 views

How I rescue my Android from a trojan and how did I get it? [closed]

I received a message with the famous link My-love co via Whatsapp and I never clicked on the link; I blocked the contact and deleted the message containing it; such a link was reported as infected by ...
3
votes
1answer
105 views

Do mobile apps have their own certificate store?

When a mobile app is sending HTTPS requests, it verifies the server certificate against some kind of certificate store. My question is, would that certificate store be provided by the phone's OS, or ...
0
votes
0answers
18 views

Sniffing Traffic Android App [duplicate]

So, imagine that a vulnerable app provides a login interface. This login sends the user's credentials to the App's server to authenticate the user. However this is done via HTTP, therefore not secure. ...
0
votes
1answer
119 views

Are cell towers basically routers? If so, could one be hacked to spread malware to all connected devices?

Just listened to a bit of the Darknet Diaries podcast episode on NotPetya. It’s insane just the damage it was able to cause even if it was only able to infect one machine initially. Which got me ...
0
votes
0answers
65 views

Spying apps: Android mic and camera access

Can android lollipop 5.1.1 apps which have permission to access mic and camera access them when the app is not running? I woke up to the news by the NYT that a popular app I had previously downloaded ...
0
votes
1answer
107 views

How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I've pentested a lot of websites and a few apps too but this app eludes them all. On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
1
vote
0answers
39 views

Getting more information about a process using mobile data

I have a process running named 10183 that occasionally uses mobile data, how do I get more information about it, like know what system application is running under that name, what does it do, and if ...
34
votes
9answers
9k views

Security implication if android app can be installed on emulator

I am working on ensuring security of my company's product. We have a mobile version of the product. This question is for the Android version Background - Our product is a SaaS-based product and the ...
4
votes
2answers
681 views

Can someone hack my phone by sending me a file (e.g. PDF) via Whatsapp?

My work requires (and depends on) Whatsapp for daily sharing of files with many people (PDF, PowerPoint, Word, Images, Web links...), and I was wondering if it is possible that someone can hack our ...
-1
votes
1answer
29 views

Passing data from Mobile APP (Android / iOS) to the web UI of the application

We want token of the user generated in Mobile App SignIn to be transferred to the WebUI what would be the better approach for sharing confidential data to the WebUI. Do we follow something like https:...
1
vote
2answers
80 views

Would a user editable URL be subjected to client vilnerability?

I am working on an android application and the company request is to be able to potentially have a user edit the API URL the app uses to be able to work with different test environments. This ...
3
votes
1answer
358 views

Is it safe to transfer location data by using TLS?

Is it safe to transfer location data by using TLS with self-signed certificates? I read a lot of varied discussions on the web which makes me to ask about the subject.
4
votes
0answers
45 views

What was the original intent for the feature that StrandHogg uses?

The "Affinity" of Android tasks seems really complex to handle. The StrandHogg vulnerability uses tricks with "Affinity" to render itself inside an another app. The information that I've found this ...
1
vote
1answer
63 views

Is my data safe if I run an android app (a game) on emulator inside a virtual machine

I want to play a very popular game made for mobile platform, but, my father doesn't allow me to touch any smartphone. I tried bluestacks to play it on my pc. But, while installing the game, its ...
2
votes
2answers
101 views

JWT Token Stored in /data/data/<app>/shared_prefs - Android App

I am testing an Android application I am creating for learning purposes (I am using a pre-existing skeleton code my friend gave me). The application uses firebase and stores the JWT token in an xml ...
1
vote
0answers
52 views

Is it possible to obtain a forensic image of an Android device without installation of custom recovery mode or rooting?

I need to forensically image a Samsung phone that is not rooted or running a custom recovery mode. I have not been able to pull an image using ADB, as the default Samsung recovery mode only allows ADB ...
1
vote
0answers
57 views

Why does Samsung access my contacts and storage if I use their store? [closed]

If I want to access the Galaxy Store on a Samsung Galaxy phone I have to agree to a set of terms (Legal information). These terms are excerpted below: All content made available to you by the ...
1
vote
0answers
77 views

Track HTTP(S) Network calls being made by an Android Device

I am planning to track the Network calls being made by apps and the website of an Android Device. I have used the Burp Suite tool for tracking the network calls. Until now the Android Device and the ...
3
votes
0answers
141 views

CORS Trusting Arbitrary Origin on Mobile App

I am testing a mobile app that makes calls to a REST API. The API is only used by Android and iOS apps. Apps are native apps and they do not use web views. API trusts arbitrary Origins and Access-...
0
votes
0answers
30 views

Ideal technique for ensuring a refurbished phone is clean of malware [duplicate]

I'm thinking of buying my next phone refurbished rather than new, since I can easily get something that meets my needs for a lot cheaper. But one concern is whether something might get surreptitiously ...
2
votes
1answer
85 views

Countering a system killing UID/GID=0 processes in Android

Suppose that there were a security system in an Android kernel meant to prevent exploits that have arbitrary kernel memory read/write from getting root privileges. This system, Kills a process by ...
0
votes
1answer
68 views

Android forensics on Samsung Galaxy S7 edge's Voice Recorder

I have a Samsung Galaxy S7 edge. The default app that comes with the phone is called Voice Recorder and it belongs to Samsung, it cannot be uninstalled. I recorded something highly sensitive that ...
1
vote
1answer
94 views

Bank client android app authentication security

I'm currently developing an android bank client app. Obviously security is key here. The app sends requests over HTTPS TLSv1.2 to my java server. What I currently have in mind Login The app asks ...
1
vote
2answers
91 views

Monitoring the HTTP(S) calls being made from android App

I want to test for security vulnerabilities in an Android App and hence want to monitor all HTTP(S) calls being made from an Android App. I have setup BurpSuit in my Laptop and have also set up the ...
2
votes
1answer
79 views

Is there any way to keep the request in intercepting proxy for atleast a min before application says check your connection?

I just bypassed SSL pinning on an android application but the problem is application won't let me play with the request on my intercepting proxy. It says something like problem with your network or ...
3
votes
1answer
122 views

Security risk of leaving bluetooth on all the time on an Android 10 phone

What are the security risks associated with leaving bluetooth on all the time on a Pixel phone updated to Android 10? In this question, I am NOT focusing on the risks associated with someone ...
-3
votes
1answer
91 views

Is there any service/application which would detect the encryption type? [duplicate]

I am debugging a TCP connection, which returned multiple values such as: +†Ä˜Õõıû and 'G1÷ù]TB*ø5£"ñB—£s∏f '1÷ù] What I am trying to find out, is how is this encrypted, and find a way to ...
2
votes
0answers
106 views

How do I protect myself from Pegasus and alike malwares?

I recently came across reports in media that Whatsapp's services were exploited by a malware Pegasus for illegal surveillance of certain individuals. Pegasus, which exploits 0-day vulnerabilities, is ...
0
votes
1answer
93 views

Disinfecting Android device

If an unrooted Android device is infected with a virus, rootkit or malware, would resetting the device disinfect it?
0
votes
0answers
52 views

Does the NSO Group's Pegasus malware compromise chats and voice calls in Signal as well?

I am aware that the Pegasus malware is capable of extracting contact lists, ordinary text messages, switching on microphone / camera remotely etc. Is it also capable of extracting the contents of ...
2
votes
1answer
72 views

Reason to generate encryption keypair server side rather than on device?

I want my native applications (android/ios) to have a keypair (RSA or ECIES) so that certain data on requests to my API can be encrypted. I want each client to have a unique keypair. The device will ...
1
vote
0answers
39 views

What does jarsigner verify in the first place (integrity or authenticity)?

I was reading sth about android code signing and have run into this statement: The second jarsigner command at v in Listing 3-7 first verifies the signature block and signing certificate, ...
62
votes
6answers
9k views

Is 2FA via mobile phone still a good idea when phones are the most exposed device?

Everyone knows that two factors are better than one. My problem is that often the only second factor allowed is text messages sent to your mobile phone. This creates two concerns: I travel frequently ...
0
votes
0answers
78 views

Anti-Theft Mobile CPU

The newest Android phones use the Qualcomm Snapdragon 855 chipset with its TrustZone/TEE. The Android OS makes sure that a stolen phone, in its assembled form, is not usable. Does Trustzone further ...
0
votes
0answers
29 views

Chrome on Android connects to suspicious address on open [duplicate]

I had legitimate suspicion that someone is spying on my internet traffic. So I connected my Android phone to proxy via mitmproxy. I noticed that when I opened Chrome, it automatically connects to ...
6
votes
2answers
145 views

How much of a security issue discontinued vendor security patches are on Android?

As an example, the original OnePlus One has good LineageOS support, but the vendor security patches were seemingly discontinued three years ago: What are the security implications and is the vendor ...
63
votes
6answers
14k views

Can a stolen Android phone with USB debugging enabled have screen lock bypassed?

My Android (8.0) phone was pickpocketed from me yesterday. It was immediately turned off by the thief and when I tried to locate it using Find My Device it shows as offline. As a programmer and a ...
1
vote
2answers
253 views

How an ISP can detect if someone having a WhatsApp call or video call? without detecting or blocking the rest of the app [duplicate]

I am asking the questions because of the latest news: https://www.bbc.com/news/world-middle-east-50095448 I wonder how the ISP can detect the use of call and video calls, without detecting or ...
1
vote
2answers
94 views

Mutual TLS and Cert Pinning solving the same problem?

To prevent MITM from my app I will use cert pinning. To prevent having not approved parties communicate to my server I can use Mutal TLS, which actually accepting communication from trusted sources. ...
0
votes
1answer
105 views

Unrooted Android

Can a hacker install a spying software or hack an unrooted Android device with physical access?