Database Info

[APP][GPL]SecDroid - Android Hardening [BETA] [Hiatus]

SecDroid V 1.1 Beta
Created by x942
Released under GPLV2​
PROJECT IS ON HIATUS
New project over here
Introduction​
SecDroid hardens the android kernel by disable certain binaries that have internet access or can be used as an attack vector. Some of these are:
SSH
SSHD
Telnet
NC (net cat)
Ping
PM (Package Manager - Can't install apps via CLI/ADB)
ADBD (ADB is disabled until reboot)
And by securing the TCP Stack using Systctl (Until Next boot).
Click to expand...
Click to collapse
More info
Why disable ADB and PM?
ADB and PM are both disabled to help prevent an attacker from being able to install apps via the command line or adb shell. Both of these are potential attack vectors. You can install apps via the playstore and GUI
Click to expand...
Click to collapse
What license is this released under?
All code is released under GPLV2 Unless otherwise noted.
Click to expand...
Click to collapse
Thanks/Credits
Many Thanks to Adam Outler for his Shell class that was used in this project (until V0.3 - See Changelog).
Many thanks to XDA-TV and XDA for their hard work!
And thanks to SANS for their Android Security whitepaper which inspired this project.
Click to expand...
Click to collapse
Downloads:
View attachment SecDroid.apk
Source Code
Latest Version (always up to date)
Play Store ] [URL="http://forum.xda-developers.com/showpost.php?p=41204527&postcount=101"](OUT-OF-DATE) [/URL]
Click to expand...
Click to collapse
Please note this is my first android app. As such bugs may be present and the code may not be pretty. If anyone can help me make it look nicer and more efficient that would be great
UPDATE 2013-05-06:
Version 1.1 Beta
* Fixed script to properly handled errors on some devices
* Fixed layout issue
* Added disable bluetooth feature (Disabled bluetoothd )
* Added enable bluetooth feautre ( Reverses above action)
Click to expand...
Click to collapse

x942 - Thanks for letting me know this is in the works - looks really promising. With things like SSH/SSHD being disabled, will apps (like Connectbot) still work, allowing for SSH/SSHD on a per app basis?

Does this just disable these things during the current running session?
IE after rebooting it does everything go back to normal?
If not is there a way to enable them again?

I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.

fluxgfx said:
I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.
Click to expand...
Click to collapse
I assume it's not a good thing because the applications are missing (which is unlikely) or they are moved to a different location

http://www.xda-developers.com/android/secure-your-android-device-with-secdroid/
featured on Xda portal!

So the "hardening" is only applied after running the app and upon next boot everything should be back to normal correct?

Mika83AC said:
I assume it's not a good thing because the applications are missing (which is unlikely) or they are moved to a different location
Click to expand...
Click to collapse
I agree with you. Although after a manual verification the application in questions aren't located on the device in any folders Internel, External or within any of the root folder.
Cheers,

fluxgfx said:
I agree with you. Although after a manual verification the application in questions aren't located on the device in any folders Internel, External or within any of the root folder.
Cheers,
Click to expand...
Click to collapse
I also has the same issue when running the app and I confirmed the apps are not located on my device.

First of all thank you so much for the effort to keep our devices safe. Im using Droidwall to block certain programs and would like to install SecDroid but not sure if it would conflict in any way. Could you please confirm?

koz said:
x942 - Thanks for letting me know this is in the works - looks really promising. With things like SSH/SSHD being disabled, will apps (like Connectbot) still work, allowing for SSH/SSHD on a per app basis?
Click to expand...
Click to collapse
Sadly no. The apps are disabled by removing their permisions to execute (chmod 000). This means no one can run it. I suppose I could have it set to only allow Connectbot to run it based on UID or something. But something like Droidwall or AFWall+ is better suited for that. I am planning to add in a switch for each item. So you could for example leave ssh enabled but disabled everything else.
Richy19 said:
Does this just disable these things during the current running session?
IE after rebooting it does everything go back to normal?
If not is there a way to enable them again?
Click to expand...
Click to collapse
Yes at this time everything is reset on reboot. I am looking into having it auto-run every boot.
fluxgfx said:
I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.
Click to expand...
Click to collapse
Correct. I have tested on CM9/10/10.1 and AOKP on both of these if it can't find anything then they aren't present in the system. Stock roms may be different. All AOSP should all be the same though.
hisname said:
http://www.xda-developers.com/android/secure-your-android-device-with-secdroid/
featured on Xda portal!
Click to expand...
Click to collapse
Nice! xD That is awesome!
PnoT said:
So the "hardening" is only applied after running the app and upon next boot everything should be back to normal correct?
Click to expand...
Click to collapse
Yes. Everything is reset upon reboot. i will add an auto-run version shortly
bushako said:
First of all thank you so much for the effort to keep our devices safe. Im using Droidwall to block certain programs and would like to install SecDroid but not sure if it would conflict in any way. Could you please confirm?
Click to expand...
Click to collapse
No problem. I have no issues with Droidwall or AFWall+ SecDroid doesn't touch iptables so everything should be fine

Are these vulnerabilities dependent upon whether USB debugging is enabled or disabled?
...and will this interfere with Apps that require USB debuggin enabled such as Titanium Backup and Gemini Apps manager.

electricpete1 said:
Are these vulnerabilities dependent upon whether USB debugging is enabled or disabled?
...and will this interfere with Apps that require USB debuggin enabled such as Titanium Backup and Gemini Apps manager.
Click to expand...
Click to collapse
The only vulnerabilities dependant on USB Debugging is Kos' p2p-adb. The rest prevent network (remote) attacks. Some of which could be used over ADB but don't depend on it (installing malware). I have not tested with TB but it may break it. I am trying to make individual on/off switches for each option so you can only disable what you want to and leave the rest alone
I have posted a Play Store link now too!

fluxgfx said:
I have to assume that it's a good thing if the application wasn't able to find any of the noted application to harden.
Click to expand...
Click to collapse
WattB006 said:
I also has the same issue when running the app and I confirmed the apps are not located on my device.
Click to expand...
Click to collapse
Same result here. Does that mean our devices are more secure since we don't have these files? I'm running pure AOSP, BTW.

I'm having the same problem.
Sent from my INO_ONE using xda premium

apatal said:
Same result here. Does that mean our devices are more secure since we don't have these files? I'm running pure AOSP, BTW.
Click to expand...
Click to collapse
No, you are not "safe". All the things are not located in system/xbin, but in system/bin! So the pathes which the app checks are wrong...
Under system/xbin are many many links, but the real "files" are located elsewhere! So the dev should chance his app so that it can check the right locations
Sent from my GT-I9300 using xda app-developers app

I checked and scp is located in the system/bin folder. All the other ones though I cannot find. Here is a screen shot of mine.
Sent from my SGH-I747 using xda premium

Can you also include in this app ARP, DOS,and MITM type of attack protection. That would be cool.

apatal said:
Same result here. Does that mean our devices are more secure since we don't have these files? I'm running pure AOSP, BTW.
Click to expand...
Click to collapse
New version coming in a few days I will post a patched version today, it looks like I uploaded the wrong version by mistake.
jas0nsg said:
I'm having the same problem.
Sent from my INO_ONE using xda premium
Click to expand...
Click to collapse
Mika83AC said:
No, you are not "safe". All the things are not located in system/xbin, but in system/bin! So the pathes which the app checks are wrong...
Under system/xbin are many many links, but the real "files" are located elsewhere! So the dev should chance his app so that it can check the right locations
Sent from my GT-I9300 using xda app-developers app
Click to expand...
Click to collapse
Oops looks like I messed up and uploaded the wrong version I will fix this. Originally it did use xbin and also disabled more things (bluetooth and NFC) but I corrected this as most users don't want those disabled. I will post the proper APK With the proper paths. It's alread compiled so expect it in a few min.
SkyandDirt said:
Can you also include in this app ARP, DOS,and MITM type of attack protection. That would be cool.
Click to expand...
Click to collapse
I can include these I will do so in a future update.

Fixed the issue. It doesn't give any errors on CM10/10.1 on my N4. Path is now /system/bin for the binaries that are there and xbin is only used for a couple binaries that are only in that folder.
Also moved repo to github as google code is annoying. Update also pushed to Play Store.

is there any app which force stop all apps at once?

how to force stop all running apps at once I know it's possible by setting but to stop one by one needs too many times so I want an application which will work this job and yeah I have rooted jellybean 4.3

mohinu2 said:
how to force stop all running apps at once I know it's possible by setting but to stop one by one needs too many times so I want an application which will work this job and yeah I have rooted jellybean 4.3
Click to expand...
Click to collapse
Greenify is the app you need P.S free grenify can only disable user apps and donation version can disable user and system apps
Current Device : Moto G XT1032

bublz654 said:
Greenify is the app you need P.S free grenify can only disable user apps and donation version can disable user and system apps
Current Device : Moto G XT1032
Click to expand...
Click to collapse
I have that app but I don't use it for a reason and myBackup Pro Does work same
is there any similar app?

mohinu2 said:
I have that app but I don't use it for a reason and myBackup Pro Does work same
is there any similar app?
Click to expand...
Click to collapse
Try re installing greenify and if it still doesn't work, there isn't really any other app that is like greenify but try app quarantine if greenify still doesn't work
Current Device : Moto G XT1032

Greenify (autostart)

Can anyone please tell me what is the ''dropzone'' ? what is it used for ?
I installed xposed and greenify but when i open greenify this image is shown (as below)
How can i solv it ? I have already the greenify to start up and as ''protected'' app ....I really dont understand what is blocking it ?
Do your huawei has a greenify like option by defoult ? If yes how and when ? Thank you so muchhhhhhhhh

You may either need to set Greenify as device administrator (Settings>Security>Device Adminstrator) or activate it on Accessibility (Settings>Accessibility>Greenify)

The-Vega said:
Can anyone please tell me what is the ''dropzone'' ? what is it used for ?
I installed xposed and greenify but when i open greenify this image is shown (as below)
How can i solv it ? I have already the greenify to start up and as ''protected'' app ....I really dont understand what is blocking it ?
Do your huawei has a greenify like option by defoult ? If yes how and when ? Thank you so muchhhhhhhhh
Click to expand...
Click to collapse
or go to power saving and select normal mode instead smart... try it MIGHT heelp

Greenify will be killed automatically in those cases:
1- If it is not in the Protected app list (Settings - Protected apps - Greenify On)
2- If it's not in the Ignore list of Clean Master, Battery Doctor, DU Speed Booster, DU Battery Saver or alike apps which kills apps when screen turned off.
3- Greenify Automater must be Active in Device Administrators under Security settings.
4- Greenify must be On under Accessibility settings.
Hope it will be of help
Sent from my HUAWEI MT7-L09 using Tapatalk

Thank you very much! Everything is clear! JUST a question: what is the drop zone function ? Thanks
Sent from my HUAWEI MT7-TL10 using XDA Free mobile app

The-Vega said:
Thank you very much! Everything is clear! JUST a question: what is the drop zone function ? Thanks
Sent from my HUAWEI MT7-TL10 using XDA Free mobile app
Click to expand...
Click to collapse
http://www.android-hilfe.de/huawei-...-app-vom-anzeigen-der-dropzone-blockiert.html

How to fix this substratum problem?

whenever i try to apply a theme on substratum theme engine,it shows "the themes binary does not pass substratums integrity verification."
How to fix this problem?

same.. any fix?

Themes are free or paid??

many free themes , same problem for me

astanvir said:
whenever i try to apply a theme on substratum theme engine,it shows "the themes binary does not pass substratums integrity verification."
How to fix this problem?
Click to expand...
Click to collapse
JusTeN_ said:
same.. any fix?
Click to expand...
Click to collapse
jatintomar said:
Themes are free or paid??
Click to expand...
Click to collapse
skastream said:
many free themes , same problem for me
Click to expand...
Click to collapse
yep. if you try to apply paid apps[without buying them, thats piracy!], you wont be able to use them.
you need to purchase those paid apps via playstore, then apply, that'll work!
they added piracy detection methods, so that they can prevent the piraates!
so, just buy em'.

sachin n said:
yep. if you try to apply paid apps[without buying them, thats piracy!], you wont be able to use them.
you need to purchase those paid apps via playstore, then apply, that'll work!
they added piracy detection methods, so that they can prevent the piraates!
so, just buy em'.
Click to expand...
Click to collapse
Tnx bro for help

astanvir said:
Tnx bro for help
Click to expand...
Click to collapse
:good:

I made theme from template and build from
Build->Build APK
But after installing in phone substratum says the not integrated with substratum's signature

For me any theme is not working.... Same problem
Even free apps...I have a moto g xt1068 running on titan ROM (latest till date) halogen kernel (latest) the substratum app and masquerade app came in built as system apps....I could not update the app too in play store.
All the themes I tried were free and downloaded from play store. Pls help me

sachin n said:
yep. if you try to apply paid apps[without buying them, thats piracy!], you wont be able to use them.
you need to purchase those paid apps via playstore, then apply, that'll work!
they added piracy detection methods, so that they can prevent the piraates!
so, just buy em'.
Click to expand...
Click to collapse
But Free Themes are Available in Playstore How Can I use Free Themes....

Amarender Reddy said:
But Free Themes are Available in Playstore How Can I use Free Themes....
Click to expand...
Click to collapse
Easy, download and apply.

aside from funny replies, I have this issue too.. Marshamallow Legacy, all my paid themes do not work and neither free ones do.. guess if it's related to the new substratum update, gonna try the old version

Follow these steps
Disable 'Verify Apps
Disable 'Verify Apps Over USB'
For this step, you'll need to enable "Developer options" if you haven't already done so. With that taken care of, head to the Developer options menu near the bottom of your system Settings page, then disable the "Verify apps over USB" option, and you'll be all set to go.

sanjananb said:
Disable 'Verify Apps
Disable 'Verify Apps Over USB'
For this step, you'll need to enable "Developer options" if you haven't already done so. With that taken care of, head to the Developer options menu near the bottom of your system Settings page, then disable the "Verify apps over USB" option, and you'll be all set to go.
Click to expand...
Click to collapse
What? How should that help?
Inviato dal mio A0001 utilizzando Tapatalk

Apk Backup+

Hello Guys
Here I present You My apk Backup+
with this app you can backup and restore your applications with 1 touch and your done
It contains material design ui and simple and intuitive ui
Hope You guys Enjoy​
Apk Backup+ is an App Backup & Restore app used to backup and restore apps for android.
You can save space of your phone by backup and remove some apps that are not frequently used.
**
Beautiful Design and Simple UI.
***
Features:
- Backup apps to SD card
- Send app between devices via WiFi and Bluetooth and using any other app
- Multi app backup
- Restore apps from SD card
- Multi app's Restore
- Quick uninstalling
- Search or Filter to easily find the app you want
- Send apk file by email
- Dark UI
- Multi Theme
- Custom backup folder (in Development)
*** Notice: Apk Backup cannot backup data or settings of apps for you, but it only backup the apk files. (For Now)
**Working On Full App+Data Backup Feature (For Root only , will try to provide for Non-Root also)​
If you Liked / didn't liked please leave a review so i can know what improve , what to remove , what to add
thank you , regards kingdevil731​

New features coming soon!!
Include:
-- Feedback
-- Auto Crash Report
Major New Feature:
_< App + Data Backup

New update up
In stable channel 1.7
: major new feature : app + data backup
And other things ( can see in changelog)
Anything just post here and I shall answer it asap
Enjoy

i'm on galaxy tab s T800 AICP rom, magisk root. installed the app but superuser denied the app, some advice?

Put it on Play Store

nec947 said:
Put it on Play Store
Click to expand...
Click to collapse
Already there , you can search for kingdevil731
You should find it
Will leave/post link to app in playstore in the thread/app xda labs description :good:

kaodd said:
i'm on galaxy tab s T800 AICP rom, magisk root. installed the app but superuser denied the app, some advice?
Click to expand...
Click to collapse
Can you describe a little more? So I am able to help you
Which version of the app?
Did the app requested the permission? ( starting from v1.7)
If It didn't are you able to check your su manager app for app permission?

kingdevil731 said:
Can you describe a little more? So I am able to help you
Which version of the app?
Did the app requested the permission? ( starting from v1.7)
If It didn't are you able to check your su manager app for app permission?
Click to expand...
Click to collapse
ok will try :silly: i'm on AICP 7.1.1, magisk superuser and busybox (galaxy tab s 10.5 - T800)
the app (1.7) does not request for permission

kaodd said:
ok will try :silly: i'm on AICP 7.1.1, magisk superuser and busybox (galaxy tab s 10.5 - T800)
the app (1.7) does not request for permission
Click to expand...
Click to collapse
The app won't ask u for root permission when u open the app
It will only request when you try to go to apk + data backup part
Try this and then give me feedback :
- click on any app when you open apk backup +
- after clicking on any app click on the first option ( app + data backup ) in the dialog that will show ( 4 options )
Then hold a sec it will ask you for root permission ( only 1st time you open the app)

Hi and great app! ?
Is it possible to include BusyBox in the app somehow, so you don't have to download a third party app?
And some feature requests:
- WiFi and Bluetooth connections backup.
- In app purchase to remove ads.
- Translations.

thra1982 said:
Hi and great app!
Is it possible to include BusyBox in the app somehow, so you don't have to download a third party app?
And some feature requests:
- WiFi and Bluetooth connections backup.
- In app purchase to remove ads.
- Translations.
Click to expand...
Click to collapse
hi , thanks for feedback and for using my app
yes it is possible , will use small extra amount of size/download size , but i can add it , and copy/install it automatically , will work on adding that (was going to do it on later updates)
yes i can add wifi and bluetooth backup
sure i can add inapp
will make translation available in next releases
thanks for the ideas :highfive:

kingdevil731 said:
The app won't ask u for root permission when u open the app
It will only request when you try to go to apk + data backup part
Try this and then give me feedback :
- click on any app when you open apk backup +
- after clicking on any app click on the first option ( app + data backup ) in the dialog that will show ( 4 options )
Then hold a sec it will ask you for root permission ( only 1st time you open the app)
Click to expand...
Click to collapse
sorry i'm late (lazy:silly finally i've got it to work, but i'ts very buggy. need to be patient ?
after hold an app a sec and tick app + data backup a toast come up "su denied ...", pressed task and suddenly su ask for permission, ok make a backup and it works ? but i need minutes for that. ok it's still beta. will stay with the app and waiting for updates. will try it on my phone too (6.0.1) thx buddy ?

kingdevil731 said:
hi , thanks for feedback and for using my app
yes it is possible , will use small extra amount of size/download size , but i can add it , and copy/install it automatically , will work on adding that (was going to do it on later updates)
yes i can add wifi and bluetooth backup
sure i can add inapp
will make translation available in next releases
thanks for the ideas :highfive:
Click to expand...
Click to collapse
Nice! Would really like the intereste integrated BusyBox.
Now we're at the suggestions, what about:
- Google Drive / Dropbox integration
- SMS, call backup
?
Are you/the app on G+ ?

kaodd said:
sorry i'm late (lazy:silly finally i've got it to work, but i'ts very buggy. need to be patient ?
after hold an app a sec and tick app + data backup a toast come up "su denied ...", pressed task and suddenly su ask for permission, ok make a backup and it works ? but i need minutes for that. ok it's still beta. will stay with the app and waiting for updates. will try it on my phone too (6.0.1) thx buddy ?
Click to expand...
Click to collapse
Thank you for the feedback
And thank you for using the app
Will fix the buggy thing
I am glad you will keep the app :highfive:

thra1982 said:
Nice! Would really like the intereste integrated BusyBox.
Now we're at the suggestions, what about:
- Google Drive / Dropbox integration
- SMS, call backup
?
Are you/the app on G+ ?
Click to expand...
Click to collapse
Yes , was going to make a separe app for that
But what you think
Separe app or same?
Yes I will be adding cloud integration soon
You mean some kind of group In Google plus?

It's good if it was ad-free and without internet permission!

kingdevil731 said:
Yes , was going to make a separe app for that
But what you think
Separe app or same?
Yes I will be adding cloud integration soon
You mean some kind of group In Google plus?
Click to expand...
Click to collapse
Separate app for BusyBox or SMS'?
Yeah, a G+ group for your app? A good way to get more users ?

kingdevil731 said:
Thank you for the feedback
And thank you for using the app
Will fix the buggy thing
I am glad you will keep the app :highfive:
Click to expand...
Click to collapse
we all are survivers ?

nec947 said:
It's good if it was ad-free and without internet permission!
Click to expand...
Click to collapse
internet permission is only for the ad , but it will have adfree soon , didn't had time to work on that , working on main app itself

thra1982 said:
Separate app for BusyBox or SMS'?
Yeah, a G+ group for your app? A good way to get more users
Click to expand...
Click to collapse
sms,wifi,bluetooth,bookmarks backup