Android Security & Malware

PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install Metasploit without proper Bluetooth pairing (CVE-2023-45866). It still affects Android 10 and bellow.
https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/

Mobile Hacker

Exploiting 0-click Android Bluetooth vulnerability to inject keystrokes without pairing Mobile Hacker

[update 2024-02-19] This vulnerability can be even used to remotely wipe data of targeted Android smartphone. Using this vulnerability it is possible to guess user lock screen PIN. After five incorrect PINs device is locked out for 30 seconds. This operation…

👍19🔥10🤡5❤2

10.1K views09:37

👍 38 👎 4

Android Security & Malware

Hunting for Android Privilege Escalation with a 32 Line Fuzzer
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-android-privilege-escalation-with-a-32-line-fuzzer/

Levelblue

Hunting for Android Privilege Escalation with a 32 Line Fuzzer

Trustwave SpiderLabs tested a couple of Android OS-based mobile devices to conduct the research on privilege escalation scenarios.

👍7

8.75K views09:32

👍 29 👎 2

Android Security & Malware

Pakistan-based Threat Actor Targets Indians with Fake Loan Android Application
https://www.cyfirma.com/outofband/pakistan-based-threat-actor-targets-indians-with-fake-loan-android-application/

CYFIRMA

Pakistan-based Threat Actor Targets Indians with Fake Loan Android Application - CYFIRMA

EXECUTIVE SUMMARY The team at CYFIRMA recently identified a pattern where unknown threat actors utilize Android malware to target individuals...

🤣18👍8👎5

9.22K views14:59

👍 20 👎 3

Android Security & Malware

Android-based PAX Technology Point of Sale (POS) vulnerabilities
CVE-2023-42133 - Reserved
CVE-2023-42134 - Signed partition overwrite and subsequently local code execution as root via hidden bootloader command
CVE-2023-42135 - Local code execution as root via kernel parameter injection in fastboot
CVE-2023-42136 - Privilege escalation from any user/application to system user via shell injection binder-exposed service
CVE-2023-42137 - Privilege escalation from system/shell user to root via insecure operations in systool_server daemon
CVE-2023-4818 - Bootloader downgrade via improper tokenization
https://blog.stmcyber.com/pax-pos-cves-2023/

STM Cyber Blog

Android-based PAX POS vulnerabilities (Part 1) - STM Cyber Blog

In this article, we present details of 6 vulnerabilities on the Android POS devices made by the worldwide known company PAX Technology.

👍13

8.33K views10:46

👍 24 👎

Android Security & Malware

Android Deep Links & WebViews Exploitations Part I
https://medium.com/@justmobilesec/deep-links-webviews-exploitations-part-i-452e8aad124f

Medium

Deep Links & WebViews Exploitations Part I

TLDR: This post is the first of a two-part series covering Deep Links & WebViews Exploitations. This article focuses on WebViews. It…

👍15

8K views11:55

👍 24 👎 1

Android Security & Malware

APK Obfucation Detection - detect code obfuscation through text classification in the detection process
https://github.com/liansecurityOS/apk-obfucation-detection

GitHub

GitHub - liansecurityOS/apk-obfucation-detection: Detect code obfuscation through text classification in the detection process.

Detect code obfuscation through text classification in the detection process. - liansecurityOS/apk-obfucation-detection

👍18👎2❤1

7.9K views09:32

👍 18 👎 4

Android Security & Malware

Buffer-overflow in Android native code — MobileHackingLab ‘Notekeeper’ Write-up
https://ajmal-moochingal.medium.com/buffer-overflow-in-android-native-code-mobilehackinglab-notekeeper-write-up-4e7764be3c2a

Medium

Buffer-overflow in Android native code — MobileHackingLab ‘Notekeeper’ Write-up

Exploiting a Buffer-overflow bug in a native library function in an Android App to gain code execution.

🔥8👍5❤2

7.39K views05:58

👍 14 👎 1

Android Security & Malware

How to debug Android/iOS native library using GDB debugger?
https://medium.com/@shubhamsonani/how-to-debug-android-ios-native-library-using-gdb-debugger-d02c0e0341eb

Medium

How to debug Android/iOS native library using GDB debugger?

Hi Guys, after a long time, I am writing a new blog that will help you guys while performing Android/iOS penetration testing. I am going…

👍13

7.39K views08:04

👍 15 👎

Android Security & Malware

Exploit released for Android local privilege elevation (root) impacts several OEMs (APEX key reuse vulnerability CVE-2023-45779)
Info: Devices contained at least one preinstalled APEX signed only with AOSP test keys, for which anyone can produce an update
Write-up: https://rtx.meta.security/exploitation/2024/01/30/Android-vendors-APEX-test-keys.html
Exploit: https://github.com/metaredteam/rtx-cve-2023-45779

Meta Red Team X

Missing signs: how several brands forgot to secure a key piece of Android

We recently discovered that Android devices from multiple major brands sign APEX modules—updatable units of highly-privileged OS code—using private keys from Android’s public source repository. Anyone can forge an APEX update for such a device to gain near…

👍9🔥2❤1

7.41K views09:20

👍 12 👎

Android Security & Malware

Complete guide on how Bluetooth and BLE works
It also includes source code for a server and client Android apps that demonstrate the communication
https://proandroiddev.com/android-bluetooth-and-ble-the-modern-way-a-complete-guide-4e95138998a0

Medium

Android, Bluetooth and BLE the modern way: a complete guide

Bluetooth is an immensely fun technology to work with. Once you learn how to search for and communicate with devices, you will be surprised…

🔥11👍3

7.86K views10:03

👍 17 👎 1

Android Security & Malware

Twelve Android apps containing VajraSpy RAT used by the Patchwork APT group. Six of these apps had previously been available on Google Play; together they reached over 1,400 installs
https://www.welivesecurity.com/en/eset-research/vajraspy-patchwork-espionage-apps/

Welivesecurity

VajraSpy: A Patchwork of espionage apps

ESET researchers discovered several Android apps that posed as messaging tools but carried VajraSpy, a RAT used by the Patchwork APT group

👍10❤3

7.84K views11:32

👍 11 👎 1

Android Security & Malware

NetHunter Hacker XII: Master Social Engineering using SET
Explained SET attack vectors such as create e-mail template, site clone, credential harvester, mass mailer, Arduino attacks, web jacking attack.
Also how to fix common errors and attack prevention tips
https://www.mobile-hacker.com/2024/02/02/nethunter-hacker-xii-master-social-engineering-using-set/

Mobile Hacker

NetHunter Hacker XII: Master Social Engineering using SET Mobile Hacker

Social engineering is a technique used by attackers to trick people into disclosing private information or doing activities that affect the security of a system or network. The Social-Engineer Toolkit (SET) is one of the most popular tools used in social…

👍19❤1

9.24K views07:33

👍 31 👎 6

Android Security & Malware

Hacking a Smart Home Device
Reverse engineered an ESP32-based smart home device to gain remote control access and integrate it with Home Assistant
https://jmswrnr.com/blog/hacking-a-smart-home-device

James Warner

Hacking a Smart Home Device

How I reverse engineered an ESP32-based smart home device to gain remote control access and integrate it with Home Assistant.

👍17

8.09K views07:14

👍 33 👎

Android Security & Malware

Analysis of Android settings during a forensic investigation
https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html

blog.digital-forensics.it

Analysis of Android settings during a forensic investigation

DFIR research

👍14❤3