Security Research
-
Binary Instrumentation Framework for Android slides (SummerCon 2012) and the Demo Video from the talk that shows my NFC/RFID tag read emulation based on my instrumentation framework.
the framework source is available here: collin_android_dbi_v02.zip (updated version from BreakPoint slides).
SMS (short message service) security on Android. The slides and tools (Android SMS injector) is available on my SMS security research page.
The DoS bug was fixed in Android 1.5 CRC1. See the oCERT Advisory.
Software
-
here is my iodine package
for Android. The package includes the iodine client, the tun (tun.ko) kernel module, and a shell script that makes it all work. You basically just have to add your configuration (domain, password, and IPs) to the shell script and
are ready to go. Of course you need to have a jailbroken G1 (or just ADP1). You will also need to install busybox so have certain command line tools that
are called from the shell script. Have legal fun!
feed/iodine_4_android.tgz (ADP1.0, 2.6.25-01843-gfea26b0)
feed/iodine_4_android_adp11.tgz (ADP1.1, 2.6.25-01845-g85d4f0d)
Applications (Market)
TelStop Google Play Store Profile-
Fix for TEL based attack, see here: Why TelStop
CellConMon Google Play Store Profile-
Simple phone network (GMS/3G) connectivity monitor. It tells you when you lose and re-gain network connectivity
using the notification bar and LEDs.
Download the APK
IP Addr Widget Google Play Store Profile-
Homescreen widget that shows current IP address.
Special feature: tap/click widget to resolv external/public IP address and hostname.