DeviceFP

Identify information an app can obtain from your device without permission.

Many apps violate your privacy by ex-filtrating your private information to track your online activity or sell to advertising agencies. This tool automatically identifies the information other apps can extract without any permissions that could be used to create a fingerprint of your device. Additionally, some apps perform special tests called "red pills" to determine if they are running on a physical device or emulator. This tools can be used to create new red pills that do not require permissions.

Overview:

* Identify information an app can access about your phone with out permission

* Study the uniqueness of your device

* Discover API calls that can be used as red pills

Features:

* Perform device fingerprint

* Result filtering

* Result export

Example filters:

android.os.Build.

~NOTE~

Because this tool uses a method called reflection to automatically fingerprint the device, sometimes hidden API calls are invoked and cause the app to crash. The tool can recover and skip these hidden calls if run again. Just keep re-running the app if it crashes during the scan, it will be skipped next time it is run.

Explanation of permissions used:

* android.permission.WRITE_EXTERNAL_STORAGE

Allows the app to export the scan to a file on your external storage to be used for closer analysis.