Android Kernel and OS Security Assessment with Iron Crow
summary
Tool named Iron Crow scans shipped Android platform images for configuration weaknesses rather than code bugs, flagging real issues: NX bit disabled by PAE changes, low mmap_min_addr values, world‑writable device nodes, unexpected setuid files and misused posix capabilities. It runs as an app or automated scanner, produces file lists and a vendor-configurable whitelist, is a beta pre‑release shown via screenshots and live devices, and claims to catch platform-level privilege escalations before OEMs ship.
AI-written summary · about
chapters (6)
related talks
50mAndrobugs Framework: An Android Application Security Vilnerability Scanner
43mSecurity in Android Applications
42mAndroid: Protecting the Kernel
42mTesting Android Security
25mHarvesting Inconsistent Security Configurations in Custom Android ROMs...
53mThe Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
53mAndroid: He protec, but he also attac
29mSecuring Android Applications - The not so se…
