Last updated: April 29, 2026
Android 6.0+ introduced runtime permissions. Android 11+ added more restrictions. Mobile pentesters check permission patterns; defenders limit ask.
The categories
- Normal — auto-granted (network, vibrate)
- Dangerous — runtime permission required (location, camera, contacts)
- Signature — only granted to apps signed with same cert as system
- Special — Settings opt-in (overlay, accessibility, device admin)
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.