🤖 Android Common Vulnerabilities

1. Insecure Data Storage

Storing sensitive data (tokens, passwords, PII) in SharedPreferences, internal files, or SQLite databases without encryption is a major risk.

• Attackers with root access or malware can extract this data.
• Use Android Keystore + AES encryption for sensitive info.

2. Improper WebView Usage

Using WebView with JavaScript enabled can expose apps to XSS and RCE via addJavascriptInterface().

// Bad practice
webView.getSettings().setJavaScriptEnabled(true);
webView.addJavascriptInterface(new Object(), "Android");

Only load trusted content and avoid exposing JS interfaces unnecessarily.

3. Hardcoded Secrets

API keys, tokens, credentials, or encryption keys embedded in the APK are easily extractable via reverse engineering tools like apktool or JADX.

String apiKey = "AIzaSyD1234EXAMPLESECRETKEY";

• Use dynamic key fetching and store secrets server-side.

4. Insecure Communication

Not using HTTPS or accepting all SSL certificates with custom trust managers leads to MITM attacks.

// Vulnerable trust manager example
TrustManager[] trustAllCerts = new TrustManager[] {
   new X509TrustManager() {
       public void checkClientTrusted(...) {}
       public void checkServerTrusted(...) {}
       public X509Certificate[] getAcceptedIssuers() { return null; }
   }
};

• Use proper certificate pinning and secure libraries like OkHttp with TLS.

5. Improper Component Export

Activities, Services, or BroadcastReceivers exposed via AndroidManifest.xml can be hijacked by malicious apps.

<activity android:name=".AdminPanel"
    android:exported="true" />

Mark components as exported="false" unless explicitly needed.