HI Jeff,

Keep in mind that if you're on the host, i.e. Android device, you don't need to 
pen test the ports, etc.  The Belarc Security Advisor runs as an App on the 
host device, so it know's the apps and OS versions.

That and some "secret sauce" - Tony Sager's* term, does the trick.

Regards,
Sumin

* Tony Sager is the former technical head of the NSA's Information Assurance 
Directorate, and a great guy.


________________________________________
From: [email protected] 
[[email protected]] On Behalf Of Jeffrey Walton 
[[email protected]]
Sent: Saturday, May 18, 2013 16:57
To: Shawn Valle
Cc: [email protected]
Subject: Re: [android-security-discuss] New Android vulnerability app

On Sat, May 18, 2013 at 3:18 PM, Shawn Valle <[email protected]> wrote:
> How does this compare / differ from xray at www.xray.io?
>
>From Valle's description, it looks like his app also scans other apps.

I was wondering if it was a straight port of Metasploit, Mercury, or
something else. I presume the device needs to be rooted to break out
of the sandbox, but its speculation.

Jeff

--
You received this message because you are subscribed to a topic in the Google 
Groups "Android Security Discussions" group.
To unsubscribe from this topic, visit 
https://groups.google.com/d/topic/android-security-discuss/NKIp15zFiUg/unsubscribe?hl=en.
To unsubscribe from this group and all its topics, send an email to 
[email protected].
To post to this group, send email to [email protected].
Visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to