http://fixme.ch/w/index.php?action=history&feed=atom&title=Fixme.ch%3AOldWiki%2FAndroid_Lab 2026-07-16T03:44:49Z Revision history for this page on the wiki MediaWiki 1.25.1 http://fixme.ch/w/index.php?title=Fixme.ch:OldWiki/Android_Lab&diff=14021&oldid=prev 2019-03-06T20:36:43Z

<p>1 revision imported</p> <table class='diff diff-contentalign-left'> <tr style='vertical-align: top;'> <td colspan='1' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='1' style="background-color: white; color:black; text-align: center;">Revision as of 20:36, 6 March 2019</td> </tr><tr><td colspan='2' style='text-align: center;'><div class="mw-diff-empty">(No difference)</div> </td></tr></table>

Rorist http://fixme.ch/w/index.php?title=Fixme.ch:OldWiki/Android_Lab&diff=14020&oldid=prev 2011-12-22T07:55:05Z

<p></p> <p><b>New page</b></p><div>= Goals =<br /> * Extract all application packages from the Market<br /> ** http://code.google.com/p/android-market-api/<br /> ** http://cyrket.com<br /> * Run batch tests (fuzzing, targeted attack) on a application subset<br /> <br /> = TODO =<br /> * Create a FIXME google account (something less obvious than fixme@gmail.com :D)<br /> <br /> = Harvest APK =<br /> * Intercept traffic http://www.floyd.ch/?p=244<br /> * Download on TPB<br /> <br /> = Attack surfaces =<br /> == Misc ==<br /> * Browser app:// scheme<br /> <br /> == Bind to service ==<br /> * Extract all apps with a private service using AIDL<br /> * Decompile apk and resources<br /> * Modify AndroidManifest.xml so the Service is exported<br /> * Save the Service interface file (.aidl)<br /> * Repackage application and resource<br /> * Create a 3rd party app accessing the service methods<br /> <br /> == Broadcast Intents ==<br /> * Extract AndroidManifest.xml data to find interesting Intent Filters<br /> * Create an application implementing all possible filters (type, data, categories)<br /> * Eavesdrop broadcasted intent, handle them before the supposed activity, replay (DoS)<br /> <br /> = Other =<br /> == Unlock screen ==<br /> * mashing button <br /> * Back button<br /> * Car dock<br /> * gmail null password<br /> <br /> == To test ==<br /> * Install app from an other app without perm prompt ???<br /> * Download apps with a transparent proxy (burp, iptables)<br /> * When login screen (ie.) invoke other activities directly..<br /> * test classes<br /> * 2nd factor auth: mTAN<br /> * MITM study on smartphones http://www.globalthreatcenter.com/wp-content/uploads/2009/11/MIMT-Whitepaper031.pdf<br /> * reverse shell with app:// scheme (no perm) http://www.defcon.org/images/defcon-18/dc-18-presentations/Lineberry/DEFCON-18-Lineberry-Not-The-Permissions-You-Are-Looking-For.pdf<br /> * https://www.owasp.org/index.php/Projects/OWASP_GoatDroid_Project<br /> * Permission leak: [[File:Android_Woodpecker.pdf]]</div>

128.178.115.37