Android

• application compatibility mechanism in Market, howto fake compatibility, what is based on
• USB HID keyboard support, howto enable
• find realy secure “app lock” application, try to circumvent its security mechanism, find application we can trust or research why its not possible to trust any of those apps

• http://thomascannon.net/projects/android-reversing/
• http://www.woodmann.com/collaborative/tools/index.php/Category:Android_Tools
• http://forum.xda-developers.com/showthread.php?t=1910873
• http://code.google.com/p/android-apktool/

• http://blogs.nuxeo.com/dev/2011/10/speeding-up-the-android-emulator.html

• https://market.android.com/details?id=it.android.demi.elettronica
• https://market.android.com/details?id=cn.opda.android.softwarelock
• https://market.android.com/details?id=com.overlook.android.fing

• http://code.google.com/p/androguard/
• Samsung Galaxy S3 tooolkit + Odin (formerly known as fastboot) (win)

• http://kitchen.yaam.mobi/
• http://lyt.no-ip.org/blog/Tag/dropad-a8/ (blog about Dropad A8 flashing, etc)
• http://rootzwiki.com/
• http://www.xda-developers.com/
• linx
• How WiFi works on Android

• https://www.owasp.org/index.php/Projects/OWASP_GoatDroid_Project
• http://blog.watchfire.com/wfblog/2011/08/android-browser-cross-application-scripting-cve-2011-2357.html
• http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability/
• http://www.symantec.com/connect/blogs/android-class-loading-hijacking
• http://www.privateerlabs.net/research/whitepapers/PRIVATEERLABS_MALICIOUS_INTENT.pdf?attredirects=0
• www.cis.syr.edu/~wedu/Research/paper/webview_acsac2011.pdf
• http://securitycompass.github.com/AndroidLabs/
• http://securitycompass.github.com/iPhoneLabs/
• http://blogs.iss.net/archive/Examining%20the%20recent.html
• https://www.trustwave.com/spiderlabs/advisories/TWSL2011-008.txt
• http://blog.spiderlabs.com/2011/09/google-android-focus-stealing-vulnerabiltiy-demo.html
• http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1823
• http://redmine.honeynet.org
• http://viaforensics.com/security/nopermission-android-app-remote-shell.html
• http://www.mcafee.com/us/downloads/free-tools/hacme-bank-android.aspx
• https://community.qualys.com/blogs/securitylabs/2012/07/25/android-security-evaluation-framework--a-s-e-f
• https://santoku-linux.com/howto/mobile-forensics/how-to-brute-force-android-encryption
• https://github.com/thomascannon/android-sms-spoof

/dev/mtd/

• mtd0 handles miscellaneous tasks
• mtd1 holds a recovery image
• mtd2 contains boot partition
• mtd3 contains system files
• mtd4 holds cache
• mtd5 holds user data

• /system/media/bootanimation.zip /system/bin/bootanimation

./adb shell am start -a android.intent.action.MAIN -n com.android.email/.Settings

http://www.anddev.org/novice-tutorials-f8/using-the-am-tool-start-activities-intens-from-a-shell-t368.html

echo 00:50:`expr $RANDOM % 89 + 10`:`expr $RANDOM % 89 + 10`:`expr $RANDOM % 89 + 10`:`expr $RANDOM % 89 + 10`

• GingerBreak, Exploid, RageAgainstTheCage

http://source.android.com/source/

http://selinuxproject.org/page/SEAndroid

http://replicant.us/

Android Open Accessory Development Kit is available in brmlab

Hands-On with the Android Open Accessory Development Kit

some hw mods documented on Picasa

Dropad A8 [NEKOMPLETNI]

• utv210_root.tgz. rozbalit na interni sd kartu.
• vypnout tablet
• vyndat externi sd kartu (ta co je ve slotu zvenku), jinak zustane flashovani viset na obrazku Tuxe
• stisknout Menu (M) a Power (C-)

http://www.youtube.com/user/MrTasselhof

http://www.slatedroid.com/topic/19289-guide-revive-your-dead-tablet/page__view__findpost__p__221288

1. Download HerotabC8_V2.2_2011_03_01.zip or Haipad_M7_0831_android2.3 Rooted.zip. (tested by ruza)
2. Take out the internal 4GB microSD and wipe it clean: dd if=/dev/zero of=/dev/sdX bs=512KB count=4 No need to do anything further, i.e. create partition or format.
3. Put the internal 4GB microSD back into the tablet.
4. Extract the contents of the ZIP. With u-boot-sd.bin from the ZIP, use dd to dump it onto an external microSD. I used a 2GB card for this. dd if=/path_to_bin/u-boot-sd.bin of=/dev/sdX
5. Copy the entire contents of the ZIP to the largest partition of the external microSD. It was the only automatically mounted partition when I replugged the card into Ubuntu.
6. I had to do these steps as recommended in the first post: rm -R utscript_sd && cp utscript utscript_sd (I didn't do it initially and after the recovery flash, my tablet couldn't boot w/o the external microSD)
7. Insert the external microSD into your tablet. Now, both microSDs are inside the tablet.
8. Press power and “M” button simultaneously. It should boot up and begin recovery. After that is done, you may remove your external microSD and proceed as your wish.

zdroj

• logcat show error mesage:

E/WifiHW  (  ): Unable to open connection to supplicant on "/data/system/wpa_supplicant/wlan0":\\
No such file or directory will appear. 

• recreate /system/etc/wifi/wpa_supplicant.conf:

ctrl_interface=DIR=/data/system/wpa_supplicant GROUP=wifi
update_config=1

more info about Android WPA supplicant