Put a Sock(et) in it: Understanding and Attacking Sockets on Android

No ratings

Presented at BSidesNashville 2016 by

Jake Valletta

You’re probably wondering how someone could possibly fill a 45 minute slot talking about the security implications of sockets (after all, there are only TCP and UDP sockets, right?). In reality, there are several unique types of sockets used by an Android device. These range from network sockets (the ones we are all familiar with), to local sockets, and even kernel-level sockets. When used improperly, these sockets can have devastating effects on the overall security of a device. In this talk, I’ll discuss several types of Linux-based sockets found on Android devices and how these sockets have historically been used to compromise devices. I’ll also provide the tools and techniques necessary to enumerate and interact with these sockets on your own device.