Androlyzer

Know more about your apps

App description

Secure Settings

com.intangibleobject.securesettings.plugin
Rating:
(4.2)
Downloads: 1,000,000 - 5,000,000
Version: 1.3.6 (43)
by intangibleObject

Secure Settings is a Locale/Tasker compatible plug-in for Android 2.2+.ATTENTION: This app uses the Device Administrator permission. If given the ability, Secure Settings can lock your device's screen, as well as set/unset your device's password. In order to make these changes, Device Administrator permissions are required.PLEASE NOTE: Any changes to your password will ONLY occur when Secure Settings is instructed by you via another app (such as Tasker) to do so.Secure Settings has tons of features for super users or those who just want more out of their devices.Conditions:• Failed Login Attempts• Google Now Shortcut [4.1+, Pro]• Outgoing Call• Secret CodeActions:• Airplane Mode [System+ required 4.2+]• Airplane Mode Radios [System+ required 4.2+]• BT Connection [4.0+]• BT Tethering [4.0+, Pro]• Execute Shortcuts• Adjust Font Size [4.0+]• Toggle Hardware Keyboard [4.0+]• Enable/Disable Keyguard [2.3 and below]• Launch any Activity (Root required for some activities)• Change default system language [4.0+]• Enable/Disable Mobile Data [2.3+]• Run any GNU Linux command º Capture output info º Use root to execute privileged commands [Root required] º Output return values to user-defined Tasker variables [Tasker required]• Show Touches [4.0+]• SIP Options [2.3+] º Toggle Receive Calls º Change Call Option• Keep device awake while charging [System+ required 4.2+]• Wake Device• Change Wifi sleep policy [System+ required 4.2+]• Wifi Hotspot [4.0+]Dev Admin Actions:• Enable/Disable Camera [4.0+]• Lock device• Toggle Lock Screen Widgets [4.2+]• Set/Reset device Password or Pin~Root functionality~If you are rooted the following is available:• Toggle Accessibility Services• Set Background Process Limit [4.0+, Pro]• Toggle Background Data [Pro]• Toggle Data Roaming• Set Active Day Dream• Toggle Day Dream State• Toggle GPS• Force GPU Rendering [4.0+]• Toggle Hardware Overlays [4.1+, Pro]• Change Input Methods without the prompt• Set Default Launcher [4.4+, Pro]• Toggle Location Services• Set Location Mode [4.4+]• Set Lock Screen Timeout [4.0+, Pro]• Update Lock Screen Owner Info [3.0+]• Toggle NFC [NFC Adapter]• Toggle Notification Listeners [4.3+]• Toggle Package Notifications [4.1+]• Manage Package Data [Pro]• Enable/Disable user or system apps• Toggle Power Button Lock [4.1+, Pro]• Toggle Pattern Lock• Answer,End and Silence calls [Pro]• Reboot Options (uses built-in functions) [Pro]• Toggle Unknown Sources• Toggle USB Debugging (ADB)• Toggle USB Tethering [4.0+, Pro]• Connect/Disconnect VPN Profiles [4.0+]• Toggle Wifi Optimization [4.2+]• Toggle Wifi Scanning [4.3+]• Toggle Wireless ADB~Custom ROM functionality~• Toggle ADB Over Network [CM9+ only]• Toggle Expanded Desktop [CM10/PA only]• Toggle Fast Charge [Custom Kernel with Fast Charge Required]• Toggle Kill App Back Button• Toggle LTE [CM9+/AOKP]• Toggle HTC Power Saver [HTC ROM]• Toggle Samsung Modes [Samsung ROM]Explanation of Permissions:• Device Administrator Access - Required to lock the device or set/reset the password• Superuser Access - Required to execute privileged commands• Storage Access - Required to write to the SD Card• Full Network Access - Required to download/check for updates for the Helper application• System Tools - Required for the Keyguard and Wake Lock functionality• Write Secure Settings - Required for performing System+ functions• Change Configuration - Required to change Locale• Change Network State - Required to toggle Mobile Data• Change Wifi State - Required to toggle Wifi Adapter for Wireless ADB• Wifi Access - Required for the Wireless ADB function• NFC - Required to toggle the NFC Adapter• Bluetooth/BT Admin - Required to Connect to BT Devices• Boot Complete - Required to install Helper on boot if missing• Process Outgoing Calls - Required to use outgoing calls as conditions

Analysis results

Malicious code

  • Add custom device admin
  • Gain superuser privileges

Privacy leaks

  • User Input to Network

Confidential sources

  • Bluetooth MAC address
  • Current Wifi info
  • IMEI
  • Screenshot
  • User Input

Suspicious functions

No suspicious detected.

Permissions

  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.ACCESS_SUPERUSER
  • android.permission.ACCESS_WIFI_STATE
  • android.permission.BLUETOOTH
  • android.permission.BLUETOOTH_ADMIN
  • android.permission.CHANGE_CONFIGURATION
  • android.permission.CHANGE_NETWORK_STATE
  • android.permission.CHANGE_WIFI_STATE
  • android.permission.DISABLE_KEYGUARD
  • android.permission.GET_ACCOUNTS
  • android.permission.INTERNET
  • android.permission.NFC
  • android.permission.PROCESS_OUTGOING_CALLS
  • android.permission.RECEIVE_BOOT_COMPLETED
  • android.permission.STATUS_BAR
  • android.permission.USE_CREDENTIALS
  • android.permission.WAKE_LOCK
  • android.permission.WRITE_EXTERNAL_STORAGE
  • android.permission.WRITE_SECURE_SETTINGS
  • android.permission.WRITE_SETTINGS
  • com.android.vending.BILLING
  • com.intangibleobject.securesettings.permission.INTERNAL
  • com.intangibleobject.securesettings.permission.WRITE_SECURE_SETTINGS
  • com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
  • net.dinglisch.android.tasker.PERMISSION_RUN_TASKS

Features used

  • android.hardware.bluetooth
  • android.hardware.nfc
  • android.hardware.telephony
  • android.hardware.touchscreen
  • android.hardware.wifi

URLs

Other URLs

  • http://forum.xda-developers.com
  • http://goo.gl
  • http://market.android.com
  • http://securesettings.intangibleobject.com
  • http://www.bugsense.com
  • https://dl.dropbox.com
  • https://docs.google.com
  • https://plus.google.com
  • https://rapid-pact-522.appspot.com
  • https://sites.google.com

Version info

APK hash: c88fb5117edb0b15904d46b0a030b07559a48126

Source structure


Used libraries

    • Open source
    • Utility

    ActionBarSherlock

    Extension of the support library designed to facilitate the use of the action bar design pattern across all versions of Android with a single API.
    Show details ⇓
    • Open source
    • Utility

    Android support library

    Simplify your development by offering more APIs that you can bundle with your application so you can worry less about platform versions
    Show details ⇓
    • Utility
    • Private service binding

    Google In-App Billing

    An Android Market service that lets you sell digital content in your applications.
    Show details ⇓

APIs used

  • org.apache.http.conn.ssl
  • org.apache.http.message
  • java.sql
  • android.database.sqlite
  • android.view
  • java.net
  • android.app.backup
  • android.view.accessibility
  • android.content.pm
  • java.lang.reflect
  • android.net.wifi
  • org.apache.http.protocol
  • org.apache.http.impl.client
  • android.os
  • android.webkit
  • android.database
  • org.apache.http.client.entity
  • android.app.admin
  • java.lang.ref
  • javax.net.ssl
  • android.security
  • android.net.http
  • android.net
  • java.util.concurrent.locks
  • org.xmlpull.v1
  • android.widget
  • android.bluetooth
  • android.util
  • android.graphics
  • org.apache.http
  • org.apache.http.auth
  • java.security
  • java.text
  • com.android.internal.util
  • android.telephony
  • javax.xml.transform
  • android.content.res
  • android.view.animation
  • android.accounts
  • org.apache.http.entity
  • org.apache.http.util
  • org.w3c.dom
  • java.io
  • android.preference
  • java.util.regex
  • java.lang
  • java.util.zip
  • android.app
  • java.util
  • org.apache.http.conn.scheme
  • javax.xml.transform.stream
  • java.math
  • android.text.method
  • java.util.concurrent.atomic
  • android.graphics.drawable.shapes
  • org.json
  • java.security.spec
  • org.apache.http.params
  • android.text.style
  • android.view.inputmethod
  • android.text
  • javax.crypto
  • javax.xml.transform.dom
  • android.graphics.drawable
  • org.apache.http.impl.conn.tsccm
  • javax.crypto.spec
  • android.provider
  • java.util.concurrent
  • android.animation
  • org.apache.http.client
  • java.nio.charset
  • android.nfc
  • android.text.format
  • org.apache.http.client.methods
  • android.hardware.usb
  • android.content
  • javax.xml.parsers
  • org.apache.http.impl.auth

Other packages

  • a.a.a
  • b.a
  • b.a.a
  • b.a.b
  • b.a.c
  • b.a.d
  • com.a.a.a.a
  • com.b.a.a.a.a
  • com.b.b
  • com.b.b.a
  • com.b.b.b
  • com.b.b.b.a
  • com.b.b.c
  • com.b.b.d
  • com.intangibleobject.securesettings.cmd
  • com.intangibleobject.securesettings.cmd.a
  • com.intangibleobject.securesettings.cmd.b
  • com.intangibleobject.securesettings.cmd.c
  • com.intangibleobject.securesettings.library
  • com.intangibleobject.securesettings.licensing
  • com.samsung.android.sdk
  • com.samsung.android.sdk.pass
  • com.samsung.android.sdk.pass.support
  • com.samsung.android.sdk.pass.support.v1
  • com.uservoice.uservoicesdk
  • com.uservoice.uservoicesdk.a
  • com.uservoice.uservoicesdk.activity
  • com.uservoice.uservoicesdk.b
  • com.uservoice.uservoicesdk.c
  • com.uservoice.uservoicesdk.d
  • com.uservoice.uservoicesdk.e
  • com.uservoice.uservoicesdk.f
  • com.uservoice.uservoicesdk.g
  • com.uservoice.uservoicesdk.h
  • com.uservoice.uservoicesdk.i
  • org.a.a.a
  • org.a.a.a.a
  • org.acra
  • org.acra.a
  • org.acra.b
  • org.acra.c.a.a.a
  • org.acra.d
  • org.acra.e
  • org.acra.sender