Building RSFA: An Android App That Reads SMS and Pushes Them to Firebase Android Kotlin Firebase SMS Building RSFA: An Android App That Reads SMS and Pushes Them to Firebase RSFA (Read Sms From Android) is a Kotlin-based Android application that captures incoming SMS messages and immediately forwards them to a Firebase Realtime Database. Designed as a developer reference — not a consumer app — it demonstrates the full pipeline: permission handling, a foreground service, a broadcast receiver for live SMS, and a one-time historical import. S Shek Samith · Feb 2023 · 15 min read In this article Project Structure Permissions & Service Startup The SMS Data Model Shared Constants The Core Foreground Service Gradle Configuration Required Mani...
Detecting Android RATs in Kotlin: A Scanner for Accessibility Abuse, Overlay Phishing, and C2 Indicators
Android Security Engineering Detecting Android RATs: A Scanner for Accessibility Abuse, Overlay Phishing, and C2 Indicators A complete defensive architecture in Kotlin using Room, Paging 3, Hilt, and Compose to identify Remote Access Trojans through permission analysis, runtime state inspection, side-load correlation, and static C2 signature scanning. Scope This article is a detection guide . Every code block builds the DangerousAppScanner — an app that identifies suspicious packages on your own device. No attack code is provided. The APIs discussed (Accessibility, NotificationListener, DevicePolicyManager) are explained at the level needed to recognize their abuse, not deploy it. Contents Why Detection, Not Construction The RAT Attack Surface & MITRE Mapping Malware Family Fingerprints Scanner Architecture Static Permission Analysis Runtime State Inspection Side-Load Correla...