Security Research
-
SafetyNet Attestation
-
Slides: 44con ekoparty
mod odex code on github
Study on Android In-App billing security paper: VirtualSwindle
Android Security - the third party slides
PatchDroid: Scalable Third-Party Security Patches for Android Devices more details and paper here: PatchDroid.com
Research on SMS-based OTP paper
Dynamic Dalvik Instrumentation Framework for Android slides: 30c3 (latest) HITB version and SummerCon version (first).
DDI on GitHub
Binary Instrumentation Framework for Android slides (SummerCon 2012) and the Demo Video from the talk that shows my NFC/RFID tag read emulation based on my instrumentation framework.
the framework source is available here: ADBI on GitHub old code here: collin_android_dbi_v02.zip (updated version from BreakPoint slides).
Baseband firewall to protect cellular networks from malicious software running on smartphones Taming Mr Hayes: Mitigating Signaling Based Attacks on Smartphones Proof-of-concept implementation using L4Android
SMS (short message service) security on Android. The slides and tools (Android SMS injector) is available on my SMS security research page.
The DoS bug was fixed in Android 1.5 CRC1. See the oCERT Advisory.
Software
-
here is my iodine package
for Android. The package includes the iodine client, the tun (tun.ko) kernel module, and a shell script that makes it all work. You basically just have to add your configuration (domain, password, and IPs) to the shell script and
are ready to go. Of course you need to have a jailbroken G1 (or just ADP1). You will also need to install busybox so have certain command line tools that
are called from the shell script. Have legal fun!
SMSPDU (GitHub link) a tool to send raw PDU SMS messages from your computer using your HTC Android phone. APK and source available.
ZygoteBench (GitHub link) a simple benchmark for process creation speed on Android. APK and source available.
feed/iodine_4_android.tgz (ADP1.0, 2.6.25-01843-gfea26b0)
feed/iodine_4_android_adp11.tgz (ADP1.1, 2.6.25-01845-g85d4f0d)
Applications (Market)
ReKey (for rooted phones)
Google Play Store Profile-
This is a fix for the Master Key bug. For more information see: Rekey.io
TelStop Google Play Store Profile-
Fix for TEL based attack, see here: Why TelStop
CellConMon Google Play Store Profile-
Simple phone network (GMS/3G) connectivity monitor. It tells you when you lose and re-gain network connectivity
using the notification bar and LEDs.
Download the APK
IP Addr Widget Google Play Store Profile-
Homescreen widget that shows current IP address.
Special feature: tap/click widget to resolv external/public IP address and hostname.