Researching Android Device Security with the Help of a Droid Army
summary
Built a heterogeneous Android cluster (about 48 devices in the demo) to measure fragmentation, automate provisioning and run commands in parallel, using cascaded USB hubs, a beefy 5V ATX power supply hack and a human-friendly device map. Tools are open source on GitHub — simple ADB wrapper scripts to run shells, push busybox/SU, capture screenshots and launch exploits across the fleet. The setup finds device-specific vulnerabilities, scales to dozens of phones, cost roughly $10k and reliably speeds auditing and exploit validation.
AI-written summary · about
chapters (10)
- 0:00Introduction and motivation
- 2:36The problem of fragmentation
- 9:14Droid army overview and demo
- 12:05Limitations of existing solutions
- 14:57Hardware build iterations
- 22:02Scalability and power design
- 28:37Physical management challenges
- 31:47Tools and workflow automation
- 39:01Exploitation and research demos
- 49:19Conclusion and Q&A
related talks
48mMastering Android Security Research: A Guide for the Modern Security Researcher
25mHarvesting Inconsistent Security Configurations in Custom Android ROMs...
45mFuzzing Android: A Recipe For Uncovering Vulnerabilities Inside System Components In Android
42mTesting Android Security
23mATtention Spanned: Comprehensive Vulnerability Analysis of AT Commands Within the Android Ecosystem
43mSecurity in Android Applications
41mJust Another Live Hacking - How Insecure Is Secure Enough?
56mApisecure, 14 & 15 March 2023 - Gabrielle Botbol, Ethical Hacker | Award-winning Pentester [...]