Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [android]

Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at android.stackexchange.com.

208 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
9 votes
1 answer
2k views

What is the difference between TEE and HSM in Android Pie?

Android has the concept of hardware backed security as TEE and in latest Android i.e., Android Pie devices can have a HSM (Strongbox). What is the actual difference between TEE and HSM? Does ...
SAR's user avatar
  • 199
6 votes
0 answers
3k views

How to bypass certificate pinning in Android phone?

I am working on analyzing Android applications from my phone using MITM Proxy. My Android phone version is 4.4.2, SDK is 19 and its rooted. I have performed all WiFi configurations required for MITM. ...
user399's user avatar
  • 61
6 votes
1 answer
338 views

How to find malware added in supply chain to Android phone?

As has become a mainstream news story many times over, some Android phones are being shipped with malware preinstalled, because they go from factory to a second party who adds the malware and then to ...
flane's user avatar
  • 69
5 votes
0 answers
720 views

What is google recommendation to fix the task hijacking issue

Applications running on android devices below 10 are vulnerable to task hijacking. Even though the issue is fixed from android 11 and above, we cannot tell our customers to upgrade the android version ...
jithu's user avatar
  • 51
5 votes
1 answer
474 views

What's the worst security issue what can happen by using eval() in Android WebView?

I've come across a hybrid Android app - meaning most of its UI is implemented in a WebView using HTML and JavaScript technologies. The app itself is connecting to the server and one of the possible ...
Mavrik's user avatar
  • 527
4 votes
0 answers
363 views

Saved password store on Android Edge browser

Does anyone have knowledge, or better yet, a reference document showing how and where passwords are stored when using the Edge browser on Android? I'm assuming it's going to be SQLite, as I ...
Andrew C's user avatar
4 votes
0 answers
173 views

Using old Android devices (as far back as Kitkat)

Are there any precautions or protocols to be followed when using older (abandoned) Android devices. Do not use bluetooth? Do not connect to open(no WPA2) WIFI spots? Use web-based services over ...
paulj's user avatar
  • 157
4 votes
0 answers
738 views

Android security risk? /cache partition encryption

So I understand Android's Full Disk Encryption only encrypts the /data partition. But if the /cache partition is unencrypted, isn't that a massive security risk? As I understand it, /cache is used for ...
iLovemyiPhone83's user avatar
3 votes
0 answers
93 views

Android Find My Device Network Privacy

My Android device today popped up a screen indicating that it had joined the new Find My Device Network that allows two-way scanning of device locations over Bluetooth. Despite Google's claims of ...
Robert Chapin's user avatar
3 votes
0 answers
139 views

Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?

Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
edfrank's user avatar
  • 31
3 votes
0 answers
4k views

CORS Trusting Arbitrary Origin on Mobile App

I am testing a mobile app that makes calls to a REST API. The API is only used by Android and iOS apps. Apps are native apps and they do not use web views. API trusts arbitrary Origins and Access-...
b4da's user avatar
  • 710
3 votes
0 answers
488 views

Privacy implications of GCM on MicroG

GCM (now FCM after a change of ownership to a Google subsidiary) is a push notification framework which is commonly used on Android phones. MicroG is an open source reimplementation of Google ...
Federico Poloni's user avatar
3 votes
0 answers
511 views

Cambridge University paper on Android factory reset still up to date?

An answer (Data deleted after encryption - recoverable?) came to conclusions, which triggered some questions for me. Link to the paper: https://www.cl.cam.ac.uk/~rja14/Papers/fr_most15.pdf ...
user205128's user avatar
3 votes
1 answer
5k views

Security risks with setDomStorageEnabled(true) in Android?

What are the security risks associated with enabling setDomStorageEnabled(true) method? Reference.
bhartay's user avatar
  • 89
3 votes
1 answer
145 views

What makes EACCES on Android?

I know that this question is too abstract. So to make things more concrete, I'm examining on dirtycow(CVE-2016-5195). And especially for Android(6.0), I confirmed this PoC works and modified run-as.c ...
9re's user avatar
  • 131
2 votes
0 answers
121 views

Did Android remove Fingerprint/Passcode for WebAuthN and lower security to push Passkeys?

So, before this year, when you were using WebAuthN to create security keys on an up to date Android phone (Pixel 6 in my case), you had these options (iirc): When creating a platform authenticator, ...
xsrf's user avatar
  • 178
2 votes
2 answers
459 views

Suspicious "ChromeSync" pop-up in Android requesting credentials

Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account. I ...
Travis Madson's user avatar
2 votes
0 answers
825 views

No root firewall vs any spyware / malware

I am wondering about the effectiveness of no root firewalls as a solution against any type of spyware / malware. Particularly on an android device. No root firewalls like this one here (aptly named) ...
casperTNH's user avatar
2 votes
0 answers
409 views

Request to produce Android APK without 'certificate pinning'

Information Protection Officer at my work requested me to produce a version of our Android App (quote) "...without SSL pinning for our.backend.domain.name.com" for vulnerability scanning ...
bluearth's user avatar
  • 131
2 votes
1 answer
210 views

Is it possible to move image files from a text thread on a phone to a virtual box without downloading them?

I'm looking into a spam bot that's been sending me messages on my phone (Samsung s10). It's sent a couple images that I want to try and scrape for metadata and do a reverse image search on. Since the ...
Wyatt Wright's user avatar
2 votes
0 answers
150 views

Getting the hostname of devices in the local lan

I'm trying to get the hostnames of devices on my LAN. This network is not a Windows network. Up until now I was able to sniff DHCP requests and extract the hostname from there, but it looks like ...
Gilad Naaman's user avatar
2 votes
0 answers
838 views

BURP SSL connection failing on Genymotion Virtual Device - Android 8.0 API 26

Everything earlier used to work fine. However, recently I downloaded a newer virtual device on Genymotion, which is an Android 8.0 API 26. I have been struggling to get HTTPS traffic intercepted on ...
qre0ct's user avatar
  • 1,522
2 votes
1 answer
408 views

Confirming the validity/ownership of a Android Signing Certificate

I have a certificate that says the application was signed by Google, but on multiple searches I have reason to believe that it's not actually a google signing certificate. Is there a way to query ...
punkcoder's user avatar
  • 121
2 votes
0 answers
159 views

Implications of adding work account to an android device

Once there's a primary Google account registered on the device and then another work account is added in order to access G Suite of the work place, what are the G Suite administrators are able to ...
Vic's user avatar
  • 121
2 votes
1 answer
531 views

Is sending an object created via intent.getSerializableExtra to handler.postDelayed leading to Code Execution?

I'm new to android pentesting and I would like to know : if sending an object created via the result of intent.getSerializableExtra("EXTRA_TEST"); to handler.postDelayed(TheObject,500) could lead ...
Neolex's user avatar
  • 384
2 votes
0 answers
177 views

Can malware in Android persist after reformatting/reinstalling?

Something similar to this happened to me recently. According to the suggested actions in the post: Do take the device into the dealer and make them explain what those messages are. If they can't ...
user3247865's user avatar
2 votes
0 answers
436 views

Fuzzing of Mobile Applications

I have used AFL recently for fuzzing of OpenSSL and it worked great. Now I am interesting in fuzzing mobile applications like I have got some .apk and .ipa files which I need to fuzz. I searched on ...
aneela's user avatar
  • 201
2 votes
2 answers
1k views

Android Root Certificate Issue

I'm trying to intercept requests using OWASP ZAP proxy and Burp Suite. My current configuration is my android phone (One Plus 5 Android Oreo 8.1) has installed both certificate from ZAP and Burp. But ...
Leroy Tam's user avatar
2 votes
1 answer
1k views

How do you get Geolocation information from the CellID field in the herrevad database from Google Mobile Services?

There's a database called herrevad, that can be found in /data/data/com.google.android.gms/databases. This database contains timestamped entries about (some of the) app activity of the phone. The ...
Charlie4n6's user avatar
2 votes
0 answers
253 views

Implementation of existing smart lock methods

Smart lock? Apple, Android, Google, and now Microsoft have a feature called "auto|smart|dynamic|proximity lock" which enables to unlock your computer by simply carrying a (Bluetooth) support device ...
Nils Q.'s user avatar
  • 29
2 votes
0 answers
231 views

How to manually download an MMS without opening?

I'm looking into a potential Stagefright attack on an Android mobile (AOS 5.+). But since I'm not an expert on the subject, I fail to find a simple way to safely download the MMS for inspection. I was ...
not2qubit's user avatar
  • 275
2 votes
0 answers
365 views

Disabling Android mediaserver (/system/bin/mediaserver) ASLR

I was able to successfully disable ASLR in Kernel on my Android mobile (Cyanogenmod). root@s3ve3g:/system # echo 0 > /proc/sys/kernel/randomize_va_space root@s3ve3g:/system # cat /proc/sys/kernel/...
dev's user avatar
  • 997
2 votes
0 answers
104 views

Secure way to communicate to an API

When it comes to Android development, what is the most secure way to make an app "talk" to an API based on sockets?
Bob's user avatar
  • 528
2 votes
0 answers
132 views

How do I encrypt an app with the device's pin as the key on an unencrypted Anroid phone?

For users who do not have whole disk encryption enabled on their phone I'd like to encrypt the apps files myself with the user's device password/pin. I do not want the user to have an additional ...
Declan McKenna's user avatar
2 votes
0 answers
93 views

How does google send and receive android app signature securely for "sign-in-with-google-account" option?

For developing an android app that lets people sign in with their google account, we have to submit app package name and developer signature to google. Every time that someone tries to log in to my ...
cybergeek654's user avatar
2 votes
0 answers
1k views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
qre0ct's user avatar
  • 1,522
2 votes
0 answers
217 views

Security implications of Android apps that require Accessibility access

Occasionally, an Android app will require access to Accessibility services. As an example, see App Hibernator. What are the security implications of allowing an app access to Android's Accessibility ...
End Antisemitic Hate's user avatar
2 votes
0 answers
147 views

Attempting Android Stagefright on Virtual Software

Does anyone know how I can exploit an android vm using stagefright? I can't use the android AVK because it doesn't support MMS.
thatguylowjwj's user avatar
2 votes
0 answers
526 views

Security token in android and embedded system

I have an embedded board with a very limited processing and memory resource. I would like to control the board using an android app. The users are categorized into 3 groups: owner of the board. ...
user2867237's user avatar
2 votes
0 answers
159 views

Google/Apple account for corporate issued mobile phones

We are working on implementing MDM (Airwatch) for all corporate mobile devices (no BYOD will be allowed). But I have a question as what is the best way to avoid users use their personal Gmail or ...
Dranik's user avatar
  • 233
2 votes
0 answers
672 views

What is the point of signature file in signed JAR/ZIP files

The way JAR signatures (or ZIP for Android) are designed is that they have a manifest file, containing digest for each file in the archive. Then there is a "signature file" that contains digest of ...
Pawel Veselov's user avatar
2 votes
0 answers
590 views

common crypto and bouncy castle, PBKDF2 generation

I am working on an iOS app and android app, for iOS I am using common crypto, and for android bouncy castle. I noticed that in android when I generate PBKDF2, if I use a salt or pass ...
Huang's user avatar
  • 121
2 votes
0 answers
646 views

VPN Server + Anonymity + Adblock for mobile Devices

In order to improve private security and anonymity while browsing the web on my mobile devices I wanted to tunnel all traffic to my own server via VPN and use a proxy software to filter unwanted (...
whlk's user avatar
  • 121
2 votes
1 answer
775 views

Capturing packets in an android application or ios application?

I've an android and ios app. They run on the same application server on Linux. I want to capture the packets when users are trying to log in to the app. How do I proceed? I'm thinking of doing it with ...
Team B.I's user avatar
  • 141
1 vote
0 answers
218 views

Android Certificate Revocation Checking

I am hoping I can leverage everyone's knowledge on this one as I am at a lose. I have an Android 10 Device connecting to a containerized web application that is secured by a custom Certificate ...
Elliot's user avatar
  • 11
1 vote
0 answers
247 views

Using Android Wireless Hotspot while connected to Hotel internet via VPN

I want to make sure I understand the security implications of this scenario: I am staying in a hotel. I have a VPN on my android phone. I connect to the hotel's unencrypted WiFi network with the ...
stochastic's user avatar
1 vote
0 answers
193 views

Hundreds of bots creating accounts using sign-in with Google

We are getting hundreds of bots creating accounts using sign-in with google, like this in this format: Colin Bush: [email protected] Tambra Lockett: [email protected] Marjorie ...
Zeone line's user avatar
1 vote
0 answers
161 views

Detecting hard to detect stalkerware - a theoretical question

Suppose you have a stalker and this person has access to professional advice. Suppose your Android phone was hacked by means of physical access, i.e. known unlock pattern or stolen password note, with ...
LiamNiam's user avatar
1 vote
0 answers
224 views

Gmail app on Android can't send messages since months

I've got the issue that the Gmail app on Android (OnePlus One device) is unable to send messages (it stays in Outbox instead of Sent). Once in the past, I've solved this by clearing the Gmail app ...
nusch's user avatar
  • 47
1 vote
0 answers
125 views

In Google account, a suspicious Android Galaxy Tab device is persistent to revoking

I have a Galaxy Tab device, but have already signed out from it and reset the tab to factory. However, in my Google account, there is still a device of "Galaxy Tab", added 200+ days ago, in ...
user avatar

1
2 3 4 5