How to collect real-time permission of The Android App? - android

I am a new one in Android and reverse engineering. I want to collect real-time permissions of the Android App.
Can I write an Android app and then use this app to collect real-time permissions of other Android App and store this permission in DB? Like the image below:
I am not sure if it is possible or not because each android app performs as a black box.
If yes please give me some hints.

Related

How to add live location tracking in Flutter even app is terminated?

I want to implement Google Map live location tracking to my application. For example I have two users, one is a carrier and one is a customer. When customer want to see where is my cargo, my application will show carrier's location to customer even carrier's application closed. How can I make this logic? I already tried packages like Workmanager. My application will work IOS and Android both. Do I have to write native code for both? If so, I maybe can write for Android but I dont know IOS side. How popular applications like Whatsapp or Snapchat do that? Is it possible to do this in Flutter?
You should have a look on the following package: https://pub.dev/packages/geolocator. It implemented your use-case by allowing background fetching of the position. It even handles the Foreground service on Android as far as I know.

Access to FB mailbox from Messenger platform

Facebook removed access to the user's mailbox, well restricted it actually:
This permission is granted to apps building a Facebook-branded client on platforms where Facebook is not already available. For example, Android and iOS apps will not be approved for this permission. In addition, Web, Desktop, in-car and TV apps will not be granted this permission.
Which for my purpose is pretty much the same thing. I'm currently looking into the new messenger app and wondering if someone knows if there is a way to have access to the text content from it.
What I'm trying to build is a translator app where a text message gets translated after sending it and before receiving it. Any help greatly appreciated.
I don't believe in getting permission to my data. Set up a scraper and pull our data out of Facebook. Then do anything you want with it.

Restrict 3rd party apps to access Internet except one app in Android

I am developing an Android Application for examination purpose. This app will be used by students and professors. Student may attempt to verify the answer from other apps by using Internet during the exam. The client want's to restrict other android apps to use Internet service when the exam app is open. Is it possible to disable Internet Access of other apps when a particular app is open?
No, you can't. But in your 'exame app' you can check when your Activities are in foreground or not. If your app goes in background, you can assume that the student is trying to do something else. What about?

Is it possible to modify the source code of inbuilt messaging application on an android phone?

Is it possible to change the inbuilt messaging application on an Android phone? I am doing a project, in which I want to encrypt and store all the incoming messages. Is it possible to see the source code of the the phone's messaging application so that I can add a new function into it, which will encrypt and store the incoming message? I am stuck right now. I read somewhere that if we root our phone, we can change the working of certain inbuilt applications. But even after rooting my phone, I don't know what to do. So please help me with any information you can.
Link for source code of android inbuilt sms app.

How Android ensures security?

I am just starting on Android development. To my nascent knowledge, it seems that anybody can grab any personal info and modify it or phone it home. Like with ContactContentProvider. I know these(permissions) have to be specifically declared in application manifest and the user would be presented with this info during installation. But still how would you you know the application handling your private data is not going to go rouge on it?
Example:
Suppose I create an app with internet
and contact-reading permissions. It
claims that it will backup contacts on
a server specified by user. While
secretly it also copies them to your
own server.
It's no different than you developing an app that does it that runs on a PC, or something that uses your gmail login to see if there's others you know on the same site.
It's all about trust. Also the Apple approval process doesn't safeguard against any of this if you hide it and when found out malicious apps can be killed & uninstalled instantly.

Categories

Resources