Saturday, March 23, 2019

security - Are there any tools to sandbox a malware application even more than the granted permissions on Android?


Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from the mic or IMEI number is needed for this particular application, except for data mining.


I want to try this app, but restrict its permissions. For example, if it reads IMEI, it should get random IMEI (but the same every time). If it tries to read the mic, it should get silence.



Some other interesting permissions:



  1. Phonebook read/write access - returns zero contacts, pretend that write is OK, but actually do nothing.

  2. Send SMS - pretend that SMS is sent, but do nothing.

  3. Get list of visible Wi-Fi networks - return zero networks.


Obviously the tool should require a rooted phone. Are there any such tools?



Answer



XPrivacyLua is a module for Xposed framework which does exactly what you need. It is free and open source. Works on rooted devices. It's the successor of XPrivacy.


Install Xposed from here: https://forum.xda-developers.com/showthread.php?t=3034811



You can then download the XPrivacyLua module from the Xposed repo through the Xposed Manager app, or manually from here:


https://repo.xposed.info/module/eu.faircode.xlua


Source:


https://github.com/M66B/XPrivacyLua




If you're running Android 5 or lower, you can use the legacy XPrivacy module.


No comments:

Post a Comment

samsung galaxy s 2 - Cannot restore Kies backup after firmware upgrade

I backed up my Samsung Galaxy S2 on Kies before updating to Ice Cream Sandwich. After the upgrade I tried to restore, but the restore fails ...