[Q] How works an app download? - Android Software/Hacking General [Developers Only]

I have to develop for a students project and need some informations about how an app download works: how the message with the apk file looks like (tried to sniff it, but it wasn't working) and how the app gets installed on the device. Maybe someone knows good sites or books where i can get detailed informations about that?

Related

[REQUEST] [APP] benchmarkpi apk needed ...

I need benchmarkpi apk to test my nexus one
thanks a lot ...
It's on the Market.
I Don't have access to market ....
I need this app too as I do not have access to the Android Market and cannot find this in any other Android app site. thank you.
Here is benchmarkpi + couple other benchmark apps you might find useful.
Thank you very much Karolis!!
Thanks to maedox & Karolis .
Off the topic, is there a way for someone with an Android phone to email me the app (the .apk file)? My brother-in-law has an Android phone and I was curious if there was a way he can send me apps that are only available in the Android Market.
Thanks!
I need 0xbench.apk, x-benchmark.apk, GLBenchmark_1.1.4_Android_Community.apk
Use something like astro to backup or does appbrian the website allow you to DL before installing?
Sent from my Nexus One using XDA App

Need help with downloading app from android market!

Hi. I can download all apps from the market exept two apps from same developer! When i search the name of apps, it says that it cant find it. I have also tried appbarin, slideme..etc. but still i cant find those two apps! The apps are visible from the web on my computer when I go to some of sites for apps that also allows downloading from mobile but they are not visible on phone. The apps are free "AndAR Model Viewer" and "AndAR". So if someone can download them for me and send me to [email protected] that would be great!
Thanks
The dev may have taken them down.
I was reading on some forum that the apps are not visible to users with VGA cameras or users without camera on their phones/tablets. I think thats the problem. Can anyone check if the apps are on market?
Thanks
They're available on my market.
Sent from my HTC Droid Incredible. This Droid Does More.
I knew it :]
Thanks for confirming it.
Could you download them and send to me on the mail above if it isn't too much trouble?
Thanks.

[APP] Apps to Phone, v1 released

I've just released a new application onto the Android Market if anyone would like to try it. I really apreciate your feedback !
The application is "Apps to Phone" and the purpose is to simplify the install process on your phone. In other words the appliction will receive messages from androlicious.com and start the install process.
The steps required are:
1. Download & Install "Apps to Phone" application from Android Market
2. Start the application and connect your phone with Androlicious website
3. From the website go to an application details page and click on "Send To Phone"
The application doesn't install anything without user permission, I find this more safe than other solutions even if this requires an extra step.
(The application only works if you have Android 2.2 or later)
Changelog
v1.0
Initial version
Tried this, but it just opens the market with the app you select on the site. I guess Auto-Installer is not working. Any ideas?
Pat123 said:
Tried this, but it just opens the market with the app you select on the site. I guess Auto-Installer is not working. Any ideas?
Click to expand...
Click to collapse
For the moment this is the main functionality, is just to simplify the install process so you don't have to search the app from the phone. Just go to a website, browse and send apps to phone.
I'm aware of the auto install (like the app from app brain) ...but that is a "hack" not a solution. Google already released some updates and that solution doesn't work anymore.
The auto feature will be included only if that solution is official and supported by the Android API.
thanks for feedback
Okay nice. One more request, probably a long shot but worth asking. I believe 2.2 introduced C2DM which is what is used by these types of apps. Is it possible to use the C2DM API to push apk files on a PC to a phone and auto-install them?
I believe not. Through C2DM it is recommended to send short messages only, like a notification. The application, based on the message received can perform actions, like downloading files from a URL...
The problem with the auto-install is that you need a special permission for installing packages, but that permission is only available for system apps. For the moment only one solution exists for auto-install, and that is to trick the Google Talk service to start the installation...
Ooh okay. Thanks. Good luck for Androlicious and let us know when auto-install feature becomes available

[Q] How can I test an .apk to see if it's "safe" to install?

Hi,
Sometimes an app (.apk) is either simply not available through Google's store, or it might say "not compatible with your device", etc. There can be various reasons why a person might download a .apk from somewhere other than a "trusted" source.
If this was a file for my PC I could test it in a "sandbox", and I could scan it with both Microsoft Security Essentials and Malware Bytes Antimalware.
On my Android phone(s) I'm not aware of something like the "sandbox" option, and I don't really want to run an "antivirus" program on my phone. Is there an easy way to scan .apk files on the PC to see if they are rogue apps, might send SMS, "phone home", or otherwise mess with other applications or the system software installed on my phone?
Lets give another example: say I thought 15 minutes was not long enough to evaluate a relatively expensive Android game (it certainly isn't!) and I want to test it out first. Let's assume my only option in that case might be an illegally downloaded copy from unknown sources. Of course, we shouldn't do that. But if we did, how could we know if the file is safe and not risk installing some Chinese spyware?
About Android AV programs: anybody know how effective they are? Do some defend against "trojans" - I would think these days trojans are 99% of problems and viruses mostly a relic of the past?
My biggest concern is actually just unwanted crap that runs in the background which eats up battery, makes my phone warm (which I hate), or, perhaps even sends SMS message [this would be even worse because I don't have a text message plan].
EDIT: I see web pages with tiles like "new study finds Android antivirus apps not effective" and articles like this one: http://www.zdnet.com/blog/hardware/...bouncer-does-it-offer-enough-protection/17981
Do we have an easy way to boot Galaxy S3 off of "external" SDCARD instead of internal memory?
Search play store for avast antivirus, completely free, updates daily and works really well (firewall. Anti theft. And many more Features
sony xperia ray ics 4.0.4
stock rom unrooted
I found this website, maybe it can help someone.
h t t p://scan.netqin.com/en/
Maybe someone can post another one...
an easy way to check for safe apk
The easiest way to check for safe apk is to have one gmail account and another "whatever" email account. Then just send the apk from the gmail one to the second account, gmail always find viruses in any apk and stop the process to join the file (virus alert). Bad point is you are limited with the size of the file you wanna send.
Nowadays, even pc antiviruses can detect viruses in apks. I would rather not burden my phone with any android antivirus,since they are literally battery hogs.
sent using my HTC One S
Go here and upload the APK
http://anubis.iseclab.org/
Anubis is a service for analyzing malware.
Submit your Windows executable or Android APK and receive an analysis report telling you what it does. Alternatively, submit a suspicious URL and receive a report that shows you all the activities of the Internet Explorer process when visiting this URL.
Andrubis executes Android apps in a sandbox and provides a detailed report on their behavior, including file access, network access, crypto operations, dynamic code loading and information leaks. In addition to the dynamic analysis in the sandbox, Andrubis also performs static analysis, yielding information on e.g. the app's activities, services, required external libraries and actually required permissions.
Found a good one too
apkscan.nviso.be - give it a try. Drag and drop - wait for the upload - than click SCAN . Wait for a few minutes. That`s all. Unlike ANUBIS it has a resolution at the end of the analysis . Usually helpful.
You can also email the file to [email protected] and it will email the report back in about ten minutes. Virustotal can display some interesting info, for example it said that Lucky Patcher is a "Potentially Infected Hosts File (v)", as reported by VIPRE and AVware.
Virustotal also has an official android app.
The Netqin scanner is also an android mobile app.
Late answer, sure, but I think ClamAV is what you want. You also want its bytecode signature file, and to speed things up, you only want that single file (speeds up things quite a bit).
It is the only offline apk scanner i know of, and as for its efficiency i cannot say, but it seems like it is what you are asking for.
An alternative would be to install something like BlueStacks and remap your "Windows shared folder" (through registry) to the folder you have your apk files in, and then run BitDefender on it. BD is by far the most pernickety AV app out there for Android.
I'll have to check out bitdefender (it's also included on virustotal.com)
apkscan.nviso.be seems to be pretty good at analyzing files for suspicious activity, and it also uploads the file to virustotal for you. Then you can copy the sha256 hash into the virustotal's search, to get all the gory details.
anubis.iseclab.org limits files to 8 megabytes.
Another way to avoid malware is:
when installing an update to an already-installed version of an application, it will 99% of the time prompt you to update an existing app. There's been rare instances where some apps do use a new digital signature (for example when spotify had a big security hole, and for awhile there were two apps by spotify in the app store).
One other way to tell, as a final check when launching the apk for installation on the phone: the icon will not have the right icon. I've installed apps before that I thought came from a trusted source, but the icon was not right. In fact, I was considering not posting this publically, so the "bad dudes" would not update their methods.
Another tool I found:
http://andrototal.org/
Although it might be a duplicate of virustotal.
nintendo1889 said:
Another tool I found:
http://andrototal.org/
Although it might be a duplicate of virustotal.
Click to expand...
Click to collapse
I just tried out this site. To me, it appears to be the most thorough virus testing site that I have seen. It takes some time for it to complete the scans. mainly because it scans the file with about 7 or 8 different scanning engines. Just just have to keep refreshing the page every few minutes to see if the results have updated.
I will be using this one as my go to site for apk scanning.
Just install it on the default emulator in the Android SDK
You can also install your apps on other emulator live bluestacks(best for games), jar of beans(best for rooted app) and windroy(the lightest)
Hit thanks if this helps
nintendo1889 said:
I'll have to check out bitdefender ...
Click to expand...
Click to collapse
Your signature photo ... awesome ... Bad Dudes
By using GDATA security , When you want to install an app the GDATA will scan it befor installing
Sent from my LG-D855 using Tapatalk
Use google scanning service VirusTotal to scan any app, secondly always use secure source. There are many well reputed apk sites but I personally use apklink.com , on this site required apk file is just a click away and its quite easy as well...
be safe & secure
This threads out of date, but it has me thinking I want to use something as mentioned in several replies to OP.
Are there any sites, or apps that can warn me if an .apk (for example) has malware etc.?
Thanks in advance for any help, including a link to another discussion that may have my answer
denise1952 said:
This threads out of date, but it has me thinking I want to use something as mentioned in several replies to OP.
Are there any sites, or apps that can warn me if an .apk (for example) has malware etc.?
Thanks in advance for any help, including a link to another discussion that may have my answer
Click to expand...
Click to collapse
Malwarebytes can detect malware.
Sent from my LGL84VL using Tapatalk
I tried this site and I like it because it goes into a lot of detail after analyzing and sends me a report in email. It was mentioned, and it is still available to use: https://apkscan.nviso.be/
Thank you for the heads up on MB, I use that on my PC and works great
You can use virustotal.

Hacking trial app (megaplayer)

I have an app with a plugin which I legitly bough off the market.
However, I just got a new phone, and cant transfer the paid plugin because the app has been deleted from the store, and just transferring the apk file, causes the app to not work, because it sees that its been "pirated".
I was wondering if anyone here can help me remove (or greatly increase) the time on a trial version i found somewhere on the internet.
I'd love to be able to pay for it, but the developers do not seem to have any activity, and i am unable to find a way to pay for the app, so I am asking for help hacking it.
App is called Megaplayer, and I want to be able to use the "player pack 5" which allows the app to download putlocker and sockshare videos.
Please help me out.
P.S. I would LOVE to pay for it. But it is literally impossible.
if you are rooted you could try lucky patcher but Im sure these threads are forbidden on these forums as it may count as piracy
One question: Can I see the screenshot of it detecting that you pirated it?

Categories

Resources