https://florencenjeri.com/tags/permissions/ Recent content in Permissions on Florence Njeri Hugo -- gohugo.io en Wed, 22 Jul 2026 09:30:00 +0000 https://florencenjeri.com/posts/android_permissions/ Wed, 22 Jul 2026 09:30:00 +0000 https://florencenjeri.com/posts/android_permissions/ Android Permissions and Component Exposure # Permissions are the layer that decides who is allowed to talk to what on an Android device. During a pentest, this is usually where the interesting bugs live: an app that exports too much, a permission with the wrong protection level, or a receiver that trusts anyone who can send it an intent. This post walks through the pieces you should be checking in every engagement, from the manifest down to custom permissions. Exported vs Non-Exported Components # The strongest protection against a malicious app is simple: do not export the component in the first place.