Bypass Android Security mechanisms using custom Kernel

No ratings

Presented at SEC-T-OxOBeyond 2018 by

Sunghyoun Song

Most Android hackers are researching application vulnerabilities using the rooting tools (SuperSU, MagiskSU) and the hooking framework (FRIDA, Xposed Framework, etc.).However, the rooting tool and the hooking framework are detected and blocked by the security mechanisms of the Android OS and the Application.So hackers have to circumvent the security mechanism applied to the Android OS and Applications which can allow an attacker to spend a lot of time analyzing and bypassing.Security mechanisms are constantly being updated, so the attackers and defenders are continuing to play cat and mouse.So in this document analyzes the security mechanism applied to Android OS and Application in detail at code level. And by creating a new Android Kernel, it creates an undetected privilege escalation backdoor, dynamic intercept and manipulate execution environment, and bypasses security mechanisms.