Drozer: Android Security Testing Framework - Security Discussion

I stumbled across this tool for testing Android Security. It's open source and from working through the user guide I can say that it's easy to use and definitely has potential as a tool for analyzing app security.
Has anyone else used it/have any experience (positive/negative) with it?
https://github.com/mwrlabs/drozer

Hi! I have not looking into this yet, but I will look into it!
Have you tried it? What is your experience?

Related

*DroidDream* help with some Privacy/Virus/Malware Protection?

So I have been looking around online just some basic stuff about privacy on the android phones and so forth.
I have also looked around the xda forums about Privacy and Protecting your ID or anything that you dont want to get out or w.e the case maybe so Im looking for some help and maybe this can help others about this if they wish to.
Well im looking for something that I can have the most protection toward viruses/malware/ID theft or any "stealth" like traces after uninstalling apps and anything that falls into that category. I have came across something called DroidDream Not sure if this is still going on in the world of android or some other form of it. But over all its something that the malware is designed to only run while the android phone is sleeping. Also talks about Once the Android smartphone is rooted, DroidDream searches for a specific package named "com.android.providers.downloadsmanager". If the package is not found, DroidDream silently installs a second malicious app without the user's knowledge. Other malicious apps can be installed in stealth from the DroidDream command and control servers I did find this info from pcworld site but thats some basic stuff..also it talks about the the update of gingerbread helped fixed that issue.
But like I said was looking for something that I can use or other members if they are not aware of such to help lock/protect their phones. I also did come across this link int he xda forums http://forum.xda-developers.com/show...hlight=Privacy
Also check this out https://www.androidpolice.com/2011/1...ction-lawsuit/
This app seems to be prefect for what im looking for or maybe anyone may have other ideas for something like this.
Thanks for all who reply and is helpful..

[Q] Easiest Tutorial For Webview Android App

I want to do a webview app for a closed community I'm apart of, but unfortunately i haven't got a clue where to start.
I followed this tutorial http://codepard.com/2012/01/adding-a-webview-to-your-android-app-using-eclipse/
but i got errors and i couldn't build the app. There are many tutorials out there and all of them just as confusing.
Do any of you have a tutorial that does a better job?
All i want is a simple app that loads a website, no ads.

RChecker v.02 [test for proper root]

I have been thinking on starting developing applications for the Android Platform for a while, but never really had the chance to get a hold of sources to begin with. I was able to create my first android application and I thought sharing my findings in xda would only encourage me to work harder, and learn many more significant approaches to coding.
Anyways, I compiled my own root-checker or RChecker for short, and I though maybe some of you would like to try it out since the new 4.3 came out, and perhaps it works. I have only tested this app in 4.2.2 and still needs many more improvements to come, who knows, maybe I will create far more innovative apps. I'll share my findings and my link to sources.
Thanks to RootTools https://code.google.com/p/roottools/
and Stericson.
Don't be shy, test out my app and share your findings. Tell me if it works. PM any problems. Thank you.
Also, not granting super user permissions to the app will work.
Changelog:
v 0.1
First release.
v 0.2
More pleasant to the eye. Added "Override Failure!" for testing purposes only.
Still no display of commands

[APP][L+] LBudget

Hello everybody,
like I guess quite a few people here, I develop for Android in my free time, and this is my second app. It's a finance tracker, hopefully an evolution to the well-known MoneyWise. I decided that I wanted a new one since, although MoneyWise is definitively useful, it's ugly and its usability is a little bit too cumbersome.
So, I made LBudget with the Material Design principles in my head as much as I could and, if any of you uses the Google+ app, you'll hopefully find the navigation relatively familiar.
The app is still in Beta phase (using the Google Play platform) and, because of the current condition of Android L, it will remain as such at least until a stable release is commercially released. Nevertheless, I would like to use the time until then for the app to be tested and improved. If you would like to contribute by installing it, you'll first need to follow the annoying Google Play standard procedure:
Join the testing community at https://plus.google.com/communities/117254163315407088886
Register as a test at https://play.google.com/apps/testing/org.jorge.lbudget (use the same account with which you joined the testing community).
Download the app in the link that the aforementioned page provides once you become a tester.
For reporting bugs, requesting features, or such, I want to really encourage you to utilize the project GitHub issue tracker, but if you don't know how to use it just leave a comment and I will "port" it to GitHub.
Also, if you're interested in contributing but not using Android L yet or simply don't want to install the app, you can contribute to the translation project at https://crowdin.com/project/lbudget
Went to check this out, but it says I need a newer SDK version. I'm not on L, anyway to make it compatible with 4.4.4?
Sc4ryB3ar said:
Went to check this out, but it says I need a newer SDK version. I'm not on L, anyway to make it compatible with 4.4.4?
Click to expand...
Click to collapse
Well, the app is compatible with L+, so understandably if you try to install in 4.4.4 you cannot. Probably it is feasible to adapt the app to 4.0+, but my intention was knowledgeably using only the new features of L to become familiar with it.

Integrating Over-the-Air Updates in Custom AOSP Project (AOSP noob)

Hi everyone,
I'm new to this forum and have joined as I've started working on a private/commercial version of AOSP. I've worked in mobile apps natively and more recently using React Native for the last 5 years and am enjoying hacking and playing around the source.
The main usage for build of AOSP is for a bespoke vehicle tracking device with a few additional features. So far I've managed to build AOSP, flash onto a device, and most recently set the tracking app as the home app so that it boots on launch.
The question that I can't find a solid answer to online is does anyone the best way of going about modifying AOSP so that we can deploy an OTA zip update and have the OS download and update it?
I'm not sure if this is necessarily the best way/use of time. I'm guessing it might be easier to just update the app itself internally and not develop OTA updates for the OS? I think at this stage I'm just after opinions before I spend too much time getting stuck into it. My only concern would be that we have 100+ devices out there and no ability to update the OS... although if it's a basic build of AOSP that just removes a few pre-installed apps, has a custom bootlogo and replaces the home app, maybe that's not necessary?
Any advice at this early stage would be gratefully received! Additionally, any tips for development or something a noob would benefit from would be great.
Thanks,
Joel

Categories

Resources