We changed our privacy policy. Read more.

Questions tagged [android]

Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at android.stackexchange.com.

190 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
777 views

What is the difference between TEE and HSM in Android Pie?

Android has the concept of hardware backed security as TEE and in latest Android i.e., Android Pie devices can have a HSM (Strongbox). What is the actual difference between TEE and HSM? Does ...
7
votes
0answers
2k views

iOS & Android Certificate Pinning with Lets Encrypt

We use cert pinning when developing for iOS and Android. We use regular 12 month certs that are paid for. We recently switched to Lets Encrypt (LE) for our general website certificates and would like ...
6
votes
0answers
311 views

How do I protect myself from Pegasus and alike malwares?

I recently came across reports in media that Whatsapp's services were exploited by a malware Pegasus for illegal surveillance of certain individuals. Pegasus, which exploits 0-day vulnerabilities, is ...
6
votes
0answers
104 views

How to find malware added in supply chain to Android phone?

As has become a mainstream news story many times over, some Android phones are being shipped with malware preinstalled, because they go from factory to a second party who adds the malware and then to ...
5
votes
1answer
189 views

What's the worst security issue what can happen by using eval() in Android WebView?

I've come across a hybrid Android app - meaning most of its UI is implemented in a WebView using HTML and JavaScript technologies. The app itself is connecting to the server and one of the possible ...
4
votes
0answers
1k views

How to bypass certificate pinning in Android phone?

I am working on analyzing Android applications from my phone using MITM Proxy. My Android phone version is 4.4.2, SDK is 19 and its rooted. I have performed all WiFi configurations required for MITM. ...
4
votes
1answer
262 views

Is it possible to use WeChat (Weixin) more safely in recent versions of Android by using permissions?

I assume that anything written or read on WeChat is read by the government of the People's Republic of China. I understand the risks of that. However, I would like to understand the implications of ...
4
votes
0answers
279 views

Privacy implications of GCM on MicroG

GCM (now FCM after a change of ownership to a Google subsidiary) is a push notification framework which is commonly used on Android phones. MicroG is an open source reimplementation of Google ...
4
votes
0answers
307 views

Do modern operating systems still send targeted or directed Wi-Fi probe requests that contain SSIDs?

Do modern (versions of) operating systems, primarily Android and iOS on mobile, still send targeted or directed probe requests when searching for Wi-Fi networks to connect to? Such targeted or ...
4
votes
0answers
271 views

Saved password store on Android Edge browser

Does anyone have knowledge, or better yet, a reference document showing how and where passwords are stored when using the Edge browser on Android? I'm assuming it's going to be SQLite, as I ...
4
votes
0answers
494 views

Android security risk? /cache partition encryption

So I understand Android's Full Disk Encryption only encrypts the /data partition. But if the /cache partition is unencrypted, isn't that a massive security risk? As I understand it, /cache is used for ...
3
votes
1answer
444 views

MSTG-PLATFORM-11: Prevent custom third-party keyboards on Android?

The MASVS states in section "V6: Platform Interaction Requirements" MSTG-PLATFORM-11: Verify that the app prevents usage of custom third-party keyboards whenever sensitive data is entered. ...
3
votes
0answers
66 views

Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?

Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
3
votes
0answers
3k views

CORS Trusting Arbitrary Origin on Mobile App

I am testing a mobile app that makes calls to a REST API. The API is only used by Android and iOS apps. Apps are native apps and they do not use web views. API trusts arbitrary Origins and Access-...
3
votes
0answers
276 views

Cambridge University paper on Android factory reset still up to date?

An answer (Data deleted after encryption - recoverable?) came to conclusions, which triggered some questions for me. Link to the paper: https://www.cl.cam.ac.uk/~rja14/Papers/fr_most15.pdf ...
3
votes
0answers
96 views

Using old Android devices (as far back as Kitkat)

Are there any precautions or protocols to be followed when using older (abandoned) Android devices. Do not use bluetooth? Do not connect to open(no WPA2) WIFI spots? Use web-based services over ...
3
votes
1answer
84 views

What makes EACCES on Android?

I know that this question is too abstract. So to make things more concrete, I'm examining on dirtycow(CVE-2016-5195). And especially for Android(6.0), I confirmed this PoC works and modified run-as.c ...
2
votes
0answers
46 views

Getting the hostname of devices in the local lan

I'm trying to get the hostnames of devices on my LAN. This network is not a Windows network. Up until now I was able to sniff DHCP requests and extract the hostname from there, but it looks like ...
2
votes
0answers
353 views

BURP SSL connection failing on Genymotion Virtual Device - Android 8.0 API 26

Everything earlier used to work fine. However, recently I downloaded a newer virtual device on Genymotion, which is an Android 8.0 API 26. I have been struggling to get HTTPS traffic intercepted on ...
2
votes
0answers
84 views

Implications of adding work account to an android device

Once there's a primary Google account registered on the device and then another work account is added in order to access G Suite of the work place, what are the G Suite administrators are able to ...
2
votes
0answers
77 views

Can malware in Android persist after reformatting/reinstalling?

Something similar to this happened to me recently. According to the suggested actions in the post: Do take the device into the dealer and make them explain what those messages are. If they can't ...
2
votes
1answer
1k views

How do you get Geolocation information from the CellID field in the herrevad database from Google Mobile Services?

There's a database called herrevad, that can be found in /data/data/com.google.android.gms/databases. This database contains timestamped entries about (some of the) app activity of the phone. The ...
2
votes
0answers
191 views

Implementation of existing smart lock methods

Smart lock? Apple, Android, Google, and now Microsoft have a feature called "auto|smart|dynamic|proximity lock" which enables to unlock your computer by simply carrying a (Bluetooth) support device ...
2
votes
0answers
127 views

How to manually download an MMS without opening?

I'm looking into a potential Stagefright attack on an Android mobile (AOS 5.+). But since I'm not an expert on the subject, I fail to find a simple way to safely download the MMS for inspection. I was ...
2
votes
0answers
396 views

Fake data stub for android authorisations

I'm annoyed by all the applications on my Android device that require access to media/camera/message/call etc, when they don't really need them. Is there a way to fake the autorisations? Like having ...
2
votes
0answers
235 views

Disabling Android mediaserver (/system/bin/mediaserver) ASLR

I was able to successfully disable ASLR in Kernel on my Android mobile (Cyanogenmod). root@s3ve3g:/system # echo 0 > /proc/sys/kernel/randomize_va_space root@s3ve3g:/system # cat /proc/sys/kernel/...
2
votes
0answers
41 views

Secure way to communicate to an API

When it comes to Android development, what is the most secure way to make an app "talk" to an API based on sockets?
2
votes
0answers
69 views

How do I encrypt an app with the device's pin as the key on an unencrypted Anroid phone?

For users who do not have whole disk encryption enabled on their phone I'd like to encrypt the apps files myself with the user's device password/pin. I do not want the user to have an additional ...
2
votes
0answers
40 views

How does google send and receive android app signature securely for "sign-in-with-google-account" option?

For developing an android app that lets people sign in with their google account, we have to submit app package name and developer signature to google. Every time that someone tries to log in to my ...
2
votes
0answers
974 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
2
votes
1answer
4k views

Security risks with setDomStorageEnabled(true) in Android?

What are the security risks associated with enabling setDomStorageEnabled(true) method? Reference.
2
votes
0answers
158 views

Security implications of Android apps that require Accessibility access

Occasionally, an Android app will require access to Accessibility services. As an example, see App Hibernator. What are the security implications of allowing an app access to Android's Accessibility ...
2
votes
0answers
96 views

Attempting Android Stagefright on Virtual Software

Does anyone know how I can exploit an android vm using stagefright? I can't use the android AVK because it doesn't support MMS.
2
votes
0answers
401 views

Security token in android and embedded system

I have an embedded board with a very limited processing and memory resource. I would like to control the board using an android app. The users are categorized into 3 groups: owner of the board. ...
2
votes
0answers
102 views

Google/Apple account for corporate issued mobile phones

We are working on implementing MDM (Airwatch) for all corporate mobile devices (no BYOD will be allowed). But I have a question as what is the best way to avoid users use their personal Gmail or ...
2
votes
2answers
1k views

CVE-2015-3864 - Android Stagefright - how Integer Overflow happens here?

I am trying to understand how "Integer Overflow" happens here and how it works. The vulnerability exists in the chunk of “tx3g”. Chunk_size is the unit which overflows the sum of size. That's to say, ...
2
votes
0answers
520 views

What is the point of signature file in signed JAR/ZIP files

The way JAR signatures (or ZIP for Android) are designed is that they have a manifest file, containing digest for each file in the archive. Then there is a "signature file" that contains digest of ...
2
votes
0answers
490 views

common crypto and bouncy castle, PBKDF2 generation

I am working on an iOS app and android app, for iOS I am using common crypto, and for android bouncy castle. I noticed that in android when I generate PBKDF2, if I use a salt or pass ...
2
votes
0answers
590 views

VPN Server + Anonymity + Adblock for mobile Devices

In order to improve private security and anonymity while browsing the web on my mobile devices I wanted to tunnel all traffic to my own server via VPN and use a proxy software to filter unwanted (...
1
vote
0answers
80 views

Needing help intercepting local SSL traffic on a difficult Android app

I'm trying to intercept traffic from an Andriod app. I've forwarded ports 80, 443, 6699 and 6698 on Kali to a listener port and set up arp-spoofing. I'm using BurpSuite on the same computer to listen ...
1
vote
0answers
44 views

What is known about the sandbox used for file parsers in MalwareBytes on Android?

Malwarebytes on Android includes a file scanner. Is it known or claimed to be sandboxed, by anything more than the Android sandbox for the Malwarebytes app? Or does it avoid using any parser code in ...
1
vote
1answer
145 views

Are emulators isolated from the host for malware testing?

I know that virtualization is different from emulation; I was wondering if emulation is isolated from its host and any destruction on it will not affect the host as if it were a virtual machine. I ...
1
vote
0answers
59 views

Can android spyware access photos of my phone

I have installed some mod apks on my phone few days ago and i am feared that if they contain any type of spyware then can they access photos of my phone?
1
vote
0answers
78 views

Can I determine whether my phone probes base transmission station (BTS) without a SIM card?

This question is related to another inquiry on this site: Can Android phone running without SIM card be tracked (localized) by police? Accepted answer claims that: Without a SIM, your cell phone ...
1
vote
0answers
333 views

Certificate warning with NoxPlayer and OWASP ZAP

I have tried to dip my toe into android hacking. I followed this helpful article on Medium. I'm using NoxPlayer emulator and OWASP ZAP as proxy. I have rooted the device, imported certificate from ZAP,...
1
vote
1answer
55 views

Can I encrypt Google backups (without setting a screenlock password?)

As you can see from my previous question, How can I escape Google?, I am not overly keen on sharing my personal data. I just got yet another new Android 'phone, after yet another died. Because I do ...
1
vote
0answers
67 views

Is it ok to store my Android app keystore password in a text file on my disk?

I am reading on how to sign and publish my flutter app on android. When reading through the official docs, they suggest to make a configuration file where I put my password to the keystore in plain ...
1
vote
0answers
48 views

Any NFC readers (Android or iOS) able to access the ePassport raw (still encrypted) data e.g. without the Basic Access Control (BAC)?

Firstly, I assume it's possible to passively read the encrypted data from a ePassport NFC chip? All of the NFC scanning apps fail to load anything without the BAC. We are not interested in the ...
1
vote
1answer
261 views

Error in intercepting the request of an Android application

I'm trying to analyze my flutter app's network traffic so I used burp suite for intercepting. First, I'm using the proxy option of burpsuite. I set my PC's IP address and port as 8080. Also in my ...
1
vote
0answers
48 views

What is the correct way to store a token for application development?

The other developer and I have two different views on storing sensitive data. So, the token is only accessible at run time in a global variable right now, but I suggested moving the token to be stored ...