Vulnerability Assessment and Attack Simulation on a Rooted Android Device

Abstract

A rooted android device is a means of unlocking the operating system, which allows any user to install unapproved programs, remove unwanted bloatware, upgrade the operating system, replace the firmware, overclock the processor, modify anything, and more. In this study, the researchers used Android 7 Nougat as an operating system seeking the security of a rooted android device. To test out the overall security of rootkits and advantages they claim to the phone itself, the group conducted penetration of a rooted android phone using the infected application, msfvenom, meterpreter, and metasploit, which resulted in successfully compromising or attacking the android phone. Despite the device being rooted, the Android 7.0 Nougat could not recognize the malicious files and did not protect the device. Though the rooting process was expected to boost the device's security due to superusers and administrative permissions, it could not prevent malicious files into the device.