Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1626.001_device-administrator-permissions
Adversaries may abuse Android’s device administration API to obtain a higher degree of control over the device.
Passed 17 of 22 test cases with the skill, and 10 of 22 without it.
and 6 more in the full report
7 fixed10 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
When organizing sub-techniques under ATT&CK Mobile, what is the exact parent technique ID for Device Administrator Permissions?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies T1626 as the parent technique ID. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1626
Adversaries may abuse Android’s device administration API to obtain a higher degree of control over the device. By abusing the API, adversaries can perform several nefarious actions, such as resetting the device’s password for Endpoint Denial of Service, factory resetting the device for File Deletion and to delete any traces of the malware, disabling all the device’s cameras, or to make it more difficult to uninstall the app.
Device administrators must be approved by the user at runtime, with a system popup showing which actions have been requested by the app. In conjunction with other techniques, such as Input Injection, an app can programmatically grant itself administrator permissions without any user input.
Platforms: Android
Determine if the target mobile environment is susceptible to Device Administrator Permissions by examining the target platforms (Android).
Review whether mitigations for T1626.001 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Changes were introduced in Android 7 to make abuse of device administrator permissions more difficult.
test cases passed, vs 10 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.