Re:No-permission Android App Gives Remote Shell
by modeless on Tuesday December 20, 2011 @11:54PM
(#3376408)
According to the linked presentation the app sends data by opening URLs in the web browser (which is obvious to the user unless the device is locked). It receives data by having the browser open URLs using a custom URL scheme (which can apparently be registered without any permissions).
[ Parent
| on HN ]
Re:No-permission Android App Gives Remote Shell
by jebblue on Tuesday December 20, 2011 @11:59PM
(#3376415)
What was that python reverse program and if that's running then the device is in debug mode (since it's an emulator maybe it's always in debug mode?). So I'm left wondering what does this prove?
Re:No-permission Android App Gives Remote Shell
by _tornado_ on Wednesday December 21, 2011 @12:46AM
(#3376500)
The python program was simply the server the attacker sets up. It could be run on any machine connected to the Internet and then accessed by the shell program from the user's device. The emulator and server were run on the same machine to make it easier to record the screencast, but the method works just the same on a real device and a remote server. There is nothing really difficult about how it is done, it is explained in the linked presentation, it is just a nice demo of it.