In 2012 macmark.de created these sample projects to show what you can do without having a permission; this includes internet access, taking commands from the internet and executing them, reading contacts and doing phone calls.
Merge branch 'master' of https://github.com/MacMark/Android_Exploits