Security Blog
Android
The Pen Test Partners Security Blog brings you the latest news and trends in penetration testing and the internet security industry.
More about our security blog »
For the best user experience please upgrade your browser
Android Content Providers 101
13 Feb 2024
How to install Frida into an Android application
20 Aug 2021
Breaking the Android Bootloader on the Qualcomm Snapdragon 660
09 Aug 2021
Decoding React Native creds on Android
21 Apr 2017
Attacking Android through custom updates
20 Sep 2016
Argos MyTablet FUBAR
09 Sep 2016
Snooping Sony Bravia TV
20 May 2016
How-to subvert Android backups to export sandboxed app files
14 Apr 2016
Another (un)smart Smarter app
24 Mar 2016
How we made the listening-in Android app
23 Mar 2016
Apps and Après. Skiing and privacy
15 Mar 2016
New Chromecast & Chromecast Audio. Have they fixed their hijacking issue?
11 Mar 2016
BLN’s IoT Forum. What went down
10 Mar 2016
Are your phones listening to you?
02 Mar 2016
Why I think that U.S. house is hounded by phone trackers
25 Jan 2016
After the BBC contacted us for comment on this story I thought it’d be useful and interesting to share the details that were omitted, as well as the reasoning behind some of my assumptions (none of which involve the Bermuda triangle BTW).
Who is tracking your run? Run and bike activity tracking app privacy issues investigated
22 Jan 2016
Steal your Wi-Fi key from your doorbell? IoT WTF!
08 Jan 2016
Star Wars BB-8 IoT toy: awesome fun, but can it be turned to the Dark Side with this vulnerability?
06 Jan 2016
OWASP Birmingham IoT Hackathon
17 Dec 2015
Vtech Innotab Max file extraction: Finding the Superblock
07 Dec 2015
VTech Innotab Max: it’s getting even worse! Apps run in debug mode
03 Dec 2015
VTech Innotab Max vulnerable to trivial data extraction
02 Dec 2015
New, easier ways to make My Friend Cayla swear
20 Nov 2015
New Wi-Fi kettle, same old security issues? Meh.
15 Oct 2015
Tonight’s CSI Cyber: implausible Marla talking doll hack. Fiction stranger than truth for once
06 Oct 2015
Should I enable encryption my Android handset?
23 Sep 2015
Android Lock Screen Bypass
16 Sep 2015
How to extract sensitive plaintext data from Android memory
19 Aug 2015
Hacking DefCon 23’s IoT Village Samsung fridge
18 Aug 2015
Inside the spy tank; a hardware review.
11 Aug 2015
How to hack an app enabled device to make it truly internet enabled
17 Jul 2015
Android debug mode and apps. A cautionary tale
15 Jul 2015
Basic safety tips for mobile devices
08 Jul 2015
Yet another attack against the iKettle wireless kettle. Rumpy pumpy and fire alarms?
23 Jun 2015
My Friend Cayla. Updated app; Updated security fails. How to make her swear (again!)
22 Jun 2015
Encrypting the database has done virtually nothing to secure the doll and app.
Common coding fails when writing Android mobile apps
17 Jun 2015
It’s amazing how many simple issues create significant security holes.
Why you’re better off buying expensive smart scales
15 Jun 2015
Hacking kettles & extracting plain text WPA PSKs. Yes really!
08 Jun 2015
GoPro Wi-Fi issues could mean stolen video, or worse…
01 Jun 2015
Short mobile PINs ARE bad, but I hate vendor FUD more!
29 May 2015
Zero-code platforms? More like zero-clue platforms
07 May 2015
Move over SHA-1, SHA-2 is coming. Here’s the why and the how
09 Apr 2015
DIY dual boot Nexus tablet; make your own mobile test rig with NetHunter
24 Mar 2015
Messing around with dildos. How to drive a vibrator with RealTerm
13 Mar 2015
Speech recognition mobile assistants, the lowdown starts here
02 Mar 2015
Fight! Fight! Hello Barbie vs My Friend Cayla
18 Feb 2015
Cracking Android passwords, a how-to
02 Feb 2015
Making children’s toys swear
23 Jan 2015
Data tethering on mobile devices – what are the risks?
09 Dec 2014
App creep: Facebook security issues
10 Nov 2014
Tearing down and reverse engineering Android (toys)
23 Oct 2014
Further Rockchip Android brokenness
13 Oct 2014
BBC article: Prevent devices being remotely wiped, here’s how to do it properly
10 Oct 2014
First Hudl2 Teardown?
08 Oct 2014
Second hand budget Android tablets spark privacy and online safety concerns
17 Sep 2014
Is a remote wipe any better than a factory reset on an Android device?
16 Sep 2014
Recovering data from ‘wiped’ Android devices: A How To Guide
15 Sep 2014
Aldi Lifetab also vulnerable to data recovery from memory
28 Aug 2014
New Rockchip firmware being released, but who is going to flash my grandma’s tablet?
22 Aug 2014
Top 10 ways to compromise your mobile security that you’d never believe
20 Aug 2014
Tesco Hudl 2 – our wish list
18 Aug 2014
Advanced traffic interception for mobile apps using Mallory and Burp
06 Aug 2014
Don’t use PIN Patterns on Android
25 Jul 2014
Key Sniffing with Android
20 Jun 2014
How to scrape plain text from an encrypted Android phone OR why most MDM products just don’t cut it
04 Jun 2014
How to hardware hack Android over UART
29 May 2014
How to Hack the Hudl – We give Rockchip a good seeing to
22 May 2014
Shameless self promotion – Pen Test Partners at Infosecurity Europe 2014
30 Apr 2014
Keep your Android versions updated. Why? If you have to ask…
24 Apr 2014
Brute Forcing Android PINs (or why you should never enable ADB part 2)
25 Nov 2013
Brute Forcing Android PINs (or why you should never enable ADB part 1)
14 Nov 2013
Suffered a Security breach?
Mobile Security
Social Engineering
Web application testing
Security Consuting
