Questions tagged [android]
Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at android.stackexchange.com.
1,351
questions
0
votes
0
answers
24
views
Analogue Device Not Supported [closed]
I received a notification analogue device not supported. Why would a analogue device be used?
I have absolutely no idea why it would display this.
0
votes
0
answers
33
views
Problems with phone [closed]
I have no admin control over my Samsung Android 13 phone.
My device reverts back to settings I change.
My location gets deleted.
I go on WhatsApp/TikToc etc and I have a profile I can actually click ...
0
votes
0
answers
38
views
How to pentest apps running on HarmonyOS
I could not find any checklist for pentesting apps on HarmonyOS. I know HarmonyOS is based on Android, and all Android applications work on HarmonyOS if I use hms instead of gms. So would an Android ...
- 1
17
votes
2
answers
6k
views
How is Xiaomi changing my browser home page?
I have recently observed that the home page of Google Chrome on my Xiaomi Android phone has been altered to a website called "Mintnav". I did not update any software. How is Xiaomi able to ...
- 187
0
votes
0
answers
45
views
Different types of USB charger attacks that work on Android phones
I'm wondering about different types of malicious USB charger attacks that work on Android devices when USB debugging option is disabled and if the USB option is set to "charge only".
I'm not ...
-1
votes
1
answer
31
views
Detect invalid cert Android client if URL being redirected to a fake server [duplicate]
Here is the scenario:
Server A is an authentic server (A.com).
Server F is a fake server (F.com) that also has a valid cert for
F.com has a copy of A.com certificate to it (to fake as A.com).
Client ...
0
votes
0
answers
46
views
Unexpected certificate authority installation on an android
Last week I received a notification pop-up on my galaxy s10 phone stating a certificate authority has been installed on this device. There was no information as to what authority was installed and ...
0
votes
0
answers
51
views
Which is safer - using the sql_conn Flutter package or using a web server as a middle layer for requests against a SQL Server database?
We are currently working on setting up new Android handheld devices (RF guns) to read/write to our SQL Server 2019 database and are at a fork in the road in deciding what to do. Both options below ...
- 101
0
votes
1
answer
106
views
Can mobile hardware have backdoor access to camera, microphone that bypasses operating system?
I found out about AOSP variants such as Calyx, Graphene, etc. They promise increased security. I want to know if hardware backdoors can allow access to the camera, microphone, etc. and subsequently ...
- 3
0
votes
1
answer
86
views
Malware infection to wifi router from android phone
Suppose a wifi router has strong admin password, updated firmware and no vulnurability then -
Is the router safe from malware infection from android phones connected to it?
Can malware from an ...
- 21
0
votes
0
answers
43
views
Is filling the internal storage of an Android device using `dd` sufficient for data removal?
I have a rooted phone I'm willing to sell, but I had Personally Identifiable Information (PII) on it and I am questioning whether filling the internal storage with null bytes using dd would be ...
- 101
0
votes
0
answers
13
views
How do end-to-end encryption (E2EE) IM apps implementing push notifications? [duplicate]
Say WhatsApp and Signal on Android devices, how do they keep the E2EE not be broken?
Some answers claimed that WhatsApp uses VoIP background mode on iOS to make the push notification invoke the app to ...
0
votes
1
answer
94
views
Vulnerability scanning on target Android device
Is there an nmap vulnerability scanning script (vuln, vulscan, nmap-vulners etc) for scanning target Android devices on the network?
If not, is there any specific scanning tool that scans for CVE on ...
- 21
24
votes
5
answers
12k
views
Spying on a smartphone remotely by the authorities: feasibility and operation
French lawmakers agreed to a justice reform bill that includes a provision granting police the power to remotely activate suspects' geolocation, microphone and camera (source).
Following the senators, ...
- 341
0
votes
0
answers
49
views
Is Android SOS being used as privilege escalation or settings bypass?
I have been getting random SOS countdowns triggered on my phone. Every time this happens, a pop-up appears telling me that unknown numbers have been temporarily unblocked. The most recent instance was ...
- 101
1
vote
2
answers
195
views
Steps after accidentally opening malicious URL with Android device
So I opened a malicious URL with my Android phone. It took some 20 seconds to dawn on me after which I put it on airplane mode. I didn't enter any info in the meanwhile.
I tried to see if I can assess ...
- 13
1
vote
0
answers
99
views
Is a mobile phone number in itself an information that can be utilized by hackers etc? [duplicate]
I recently installed Tinder, and I saw that the app warns about sharing your phone number to avoid being hacked.
I also noticed certain obviously fake profiles pressing for getting a phone number or ...
- 111
0
votes
0
answers
88
views
I'm receiving text messages that my family didn't send
Lately I've been receiving text messages from family members that they did not send. All 4 family members and I are a part of the SMS group where we send and receive messages related to our family.
...
- 1
0
votes
0
answers
117
views
Are drive-by downloads and installs a significant threat to an average modern Android or Firefox for Windows user?
Today I learned that drive-by downloads and drive-by installations are or have been a thing. Yet there's something very counterintuitive about them if considered a real threat for modern smartphone or ...
- 103
0
votes
0
answers
114
views
Are Android Bluetooth file transfers encrypted?
Suppose I pair two Android phones together using Bluetooth and transfer a file from the first phone to the second by sharing the file using Bluetooth. Does Android encrypt the file transfer so that no ...
- 773
0
votes
1
answer
121
views
Is a short password good enough if the phone has the "auto factory reset after 15 lockscreen password errors" feature on?
My Samsung Galaxy phone has a feature named "auto factory reset," by which (according to the blurb in the device's settings) this happens:
After 15 incorrect attempts to unlock
your phone, ...
- 227
0
votes
0
answers
73
views
ISP-restricted VPN on Android
How to connect to VPN service on Android via its app if it's restricted by state ISPs, but you're able to connect via cloud VPS network outside the state
My idea is about concepts in general:
you ...
- 11
0
votes
0
answers
328
views
Cannot aireplay-ng deauth attack Android 11
I was trying to do a deauth attack on Android 11 phone but it didn't work. I am using
sudo aireplay-ng --deauth 100000 -a [AP mac_addr] -c [my mac_addr] wlan0
The access point uses wpa2 encryption, ...
1
vote
1
answer
155
views
Security of Trusty OS (TEE) Non-Secure World API
Recently I learned about TEE in Android, Trusty OS and its internals. I read through the articles on source.android.com and there is one thing I did not find there.
Trusty OS has its own API which ...
- 123
0
votes
0
answers
70
views
Android FBE without screen lock
Is there any difference in the security of a factory reset with FBE (File-Based Encryption) on Android 10+ when not using a screen lock vs. using a screen lock before the factory reset is performed?
14
votes
1
answer
3k
views
SSL issue captures Facebook app send out traffic
I tried to capture the send-out traffic of the Android app (Google Drive, Facebook, etc.). This is my security thesis.
I succeed capture send-out traffic on the Google Drive app with Mitmproxy but ...
- 243
1
vote
1
answer
124
views
MSTG-ARCH-3 What means?
In the OWASP Mobile Application Security Checklist there is a requirement called MSTG-ARCH-3 which describes:
"A high-level architecture for the mobile app and all connected remote
services has ...
- 13
0
votes
2
answers
113
views
As long as an Android device does not get rooted, is it safe to assume that the main phone app has not been modified?
From a forensics standpoint, is there any technical possibility that WITHOUT rooting the device the potential cybercriminal used a manipulated system phone app to have hidden functionalities like ...
- 1,546
0
votes
1
answer
93
views
How does Android/Firefox authenticate the Android Pocket app, for example?
I installed the Android Pocket app and logged in. My default browser is Firefox, which is already logged in to my Firefox account. This meant I did not have to enter my Firefox account password. ...
- 639
0
votes
1
answer
135
views
Does SS7 attack cause malicious apps to install on your phone?
After watching a video course about SS7 attacks and remote control flaws through WiFi adapters of smartphones, a question comes to my mind:
If an adversary can intercept your SS7 traffic and relate it ...
2
votes
0
answers
109
views
Metasploit Meterpreter how to restore/create new session? [closed]
I created an apk for Android with Metasploit. Started with host ip and port and opened the "receiver terminal"
A lot of things worked well when executing the apk but after some time the ...
- 21
0
votes
1
answer
120
views
Can flash drive infect Android and then the Android infect Windows PC?
I found a flash drive outside my home. Thinking one of my neighbors might have dropped it and wanting to return to them (but still wanting to be cautious), I (stupidly) plugged it into an old Android ...
- 1
1
vote
0
answers
152
views
Can you decrypt storage from an Android phone directly from the flash?
I have an old phone that I am trying to recover the data from. I was hoping to desolder the chip and buy an expensive reader for NAND flash chips but then it occurred to me that the contents of the ...
- 111
1
vote
0
answers
107
views
Why was CVE-2022-20411 (Bluetooth Remote Code Execution) not detected by Android's BoundSanitizer?
CVE-2022-20411 enabled remote code execution over Bluetooth on Android. It was fixed in December 2022. But why was it not detected by Android's BoundsSanitizer?
Its purpose is to detect and prevent ...
- 111
1
vote
1
answer
1k
views
Using Android private DNS with VPN
Android allows now to set "private DNS" in the settings (which also allows using DNS over TLS - sadly over HTTPS atm only works for specific DNS providers).
What I am trying to establish is: ...
- 13
0
votes
0
answers
58
views
Is opening a tab in duckduckgo browser in Android considered safe from data leaks?
I use ColorOS (based on Android 12) and DuckDuckGo browser 5.145.4.
I want to know if opening a tab in DuckDuckGo browser to my mailbox online can leak sensitive data. In my case, it's a French server ...
0
votes
0
answers
71
views
MobSF Android Activity APK Pentest
it is my first time with MobSF and Android APK assessment. I have found something while testing a specific APK and I am trying to understand the concept behind it:
Under HARDCODED_SECRETS in MobSF, ...
- 1
0
votes
1
answer
310
views
Is having hard-coded API keys such as the SafetyNet API key considered a vulnerability?
I have a scenario where the developers are using SafetyNet API to protect their Android apps. I observed that the SafetyNet API key has been hard-coded within the apk file. This is the first time I ...
0
votes
1
answer
89
views
What security reviews are done on apps in mobile app stores? [closed]
What checks (static analysis, dynamic analysis etc.) does Google, Apple, Amazon etc. do on their app stores with each app developer submit? Are they automatic or manual?
Does any app store review ...
- 129
1
vote
1
answer
172
views
How does an attacker modify local files when I access them in Chrome?
I have a trusted html file containing a script that handles sensitive information. When I open it in Chrome 108 on Android, it says:
What is this about?
The above warning seems to appear ...
- 379
2
votes
2
answers
196
views
Is it plausible that NSO Group's 0-click attacks are actually bugdoors?
By bugdoors, I mean OS/app devs deliberately introducing vulnerabilities & sharing with front orgs like the NSO Group which then develops and markets the spyware?
Would this process be easier ...
0
votes
1
answer
99
views
What are the indications on my smartphone that I have security problem/data leak/trojan
I am using a paid (non-free) antivirus on my Android 13. I am curious however, what would be the signs/"symptoms" in case I have data leakage/security issues/trojan on my smartphone? How can ...
- 256
-4
votes
1
answer
212
views
How do non technical users tell which App stores are safe enough & remain safe using an app store as their quality/vetting varies?
Further to my previous question.
I'm now asking for the 'so what' for all app stores...
Which app store performs better checks so non-technical users can trust the protection? Including 3rd party app ...
- 129
1
vote
1
answer
198
views
How does a non technical user/beginner vet Android apps to ensure they are safe?
Background
I moved from ios to Android so now can't rely on Apple doing some checks on the apps.
I was told that Google does some automated checks and if you buy/download apps from large organisations,...
- 129
0
votes
0
answers
55
views
Retrieving Android phone's identifiers
I will be publishing a fingerprinting app that shows its user how much access to their Android phone's identifiers it has. I haven't started writing it because I need to understand how can any Android ...
- 23
1
vote
1
answer
464
views
Android File Encryption without screen lock
I am trying to understand the FBE Key generation and verification process at every boot. My device is going to be handled without a lock screen (Android 11 with FBE + Metadata Encryption Enabled), so ...
- 13
1
vote
1
answer
245
views
Mobile network APN: security implications of "Authentication type" equal "None"
My mobile network provider instructs me to set up my APN by resetting everything to default, and then only changing APN to their value. I see that this leaves the setting Authentication type as None.
...
- 373
2
votes
1
answer
256
views
Is a single reset sufficient to make data irrecoverable?
I have a Samsung A13 with the latest version of Android OS. Does one pass of factory reset make all data irrecoverable, or do I have to make multiple passes?
- 21
0
votes
0
answers
34
views
How to handle the Oath2.0 credentials in the APK files
These days, mobile apps commonly leverage Oauth /OpenIdConnect-based authentication and authorization frameworks. To achieve this, the Oauth clients (the App running on android/IOS) must have a few ...
- 177
3
votes
1
answer
2k
views
What is known about the android spinmaze malware
The android spinmaze malware is characterised by the unrequested installation of the "spinmaze" application, and repeated popup messages of the form "Shortcut spinmaze already exists&...
- 131