[Galaxy Tab S Android Development] vecna:
.... What ?

This is a rom i put together as a daily driver. But which has slowly grown into a project.

It is now indeed a stable daily driver, exceeding my initial expectations considerably, everything works ( well ! ) , the Antutu Benchmarks show it to be the fastest benchmarked t705 in xda.

Do not be fooled by its TW base, there is very little left of the ( quite literally ) hundreds of Sec utils, just the stuff you need.

Each system component of Fenris has been scrutinized as regards memory usage and cpu cycles ( well as much scrutiny as the massively complex memory management of modern android allows ) , anything not meeting my expectations has been replaced or removed.

.... XDA Edition ?

Fenris has 2 editions

a) Fenris standard , concentrating on penetration and just as importantly defense from penetration !!

b) Fenris XDA , concentrating on defense from penetration.

As time goes by and my experience of the very very black professional ha**er scene increases i will be building frontline defences against the worst exploits commonly used, directly into Fenris.

Since a lot of the source ( all of the base source ) comes from the good people on this site i have felt compelled to share.

Fenris standard is obviously not hosted on XDA.

.... Trust

Modifications and patches will be logged in a github page for public scrutiny, but at the end of the day unless your a C++/Java coder one has zero idea if some tiny code change is actually malicious.

Its a matter of trust, ultimately i have to trust the patches and defenses i include into Fenris ( obviously i scrutinize what i can ), and i have to trust the Samsung propriety code. If you want to use Fenris, you have to trust me lol.

.... Base

Android Version …. 6.01

Base…. https://www.sammobile.com/firmwares/galaxy-tabs/SM-T705/TGY/download/T705ZHU1CQB1/124107/

Build Date …. Mon, 13 Feb 2017 06:03:11 +0000

Modem…. T705ZHU1CQB1

........ Features

Stripped to the bone of Samsung crapware

AOSP Launcher 3

Hackers Keyboard ( English dictionary ) ( Samsung keyboard had a bug )

Floating window and multiwindow

Supersu preinstalled into /system

Xposed preinstalled into /system

BusyBox preinstalled

Huge number of Android naitive compiled binaries ( Bash nano and many more )

Preinstalled and working microg ( open source gapps alternative )

Preinstalled , and pre-researched Xposed modules, System tools.

Custom kernel, selinux permissive, Samsung configs removed.

Old style installer, make system changes easily without having to extract images

.... Why ?

I am a lifelong AOSP user ( in various incarnations CM, Vanir,AICP etc on various devices ) and would normally be using Vanir on this device, but the fingerprint and text situation of CM13 has finally stopped me ( when I realised I actually liked having a fingerprint sensor ).

Firmly stuck with a TouchWizz ( TW ) base I resolved to strip the stock image down to the very bone, in an effort to somehow mimic the streamlined performance of Vanir.

My interests include Pentesting and Linux in general, so this Rom had to be compatible with both

.... Design

There is always a trade-off in any system between functionality and resource usage ( in this case ram and cpu cycles ), i am firmly on the resource side .

I believe the function of an OS is to better facilitate the running of programs , NOT to replace the programs with OS native attempts at the same.

Given that this ROM is all about minimizing cpu and ram usage , while at the same time keeping core functionality ( at this point have to admit i kept a few processes that have nothing to do with core functions , i just found then extremely cool ).

The target was to approach the cpu/ram usage of a similar cm13 build, i feel that has been achieved, Fenris runs with approx 15% greater resource usage ( than a cm13 build ). I think it would be very difficult if not impossible to get any nearer to AOSP/CM performance , and keep the cool stuff.

.... Keeping processes in check

There is little point in all this optimization effort on the OS if along comes a badly written program to ruin the whole show, normally this is in the hands of the user , but when it comes to gapps its not in the hands of the user..

Google play services can be considered a system component, the APIs it presents, are required for quite a few of the apps i like. And as such its resource usage must be considered ..

GMS started off ( around v4..xxx to 5..xxx when i started tracking it ) with heavy but acceptable resource usage, it was also to a degree customisable by disabling services and receivers.

By v11..xxxx it had grown by about 50% both in ram and cpu usage. So what to do ?

https://microg.org is the answer in this case

And is fully implemented into Fenris, more importantly it works at a tiny fraction of the resource usage of GMS and associated components.

Its such a vital project that i would ask anyone using Fenris for their own benefit to donate or contribute to https://microg.org

.... Linux

I use linux a lot and always like to have a bash terminal handy, so I imported bash from Vanir CM13 build, nano also from the same, SSH plus a bag of others ( thanks nanomod ) All are native and work within the android directory hierarchy.

.... User pre install configuration

Fenris is packaged oldschool style , and is totally open for a user to modify as required without having to extract and repack a sparse image,

Just open up the archive and modify the contents of the system directory as required, the installer script will cope with additions and deletions for the most part.

.......In development

Frontline R.A.T protection , specificaly against AndroRAT and clones.

"Remote administration tool : A RAT or remote administration tool, is software that gives a person full control a technical device, remotely. The RAT gives the user access to your system, just as if they had physical access to your device. With this access, the person can access your files, use your camera, and even turn on/off your device. Once the RAT is installed on your device, the hacker can wreak havoc. They could steal your sensitive information, block your keyboard so you can’t type, install other malware, and even render your devices useless. A well-designed RAT will allow the hacker the ability to do anything that they could do with physical access to the device."

This is one of the primary attack methods employed today, they DO NOT NEED ROOT ,seem to be immune to permissions, and SELinux

, most use some metaspoilt attack.

The normal method of deployment is through a smali decompiled apk, which is then injected with a payload, but not at all the only method.

Soon i hope to understand the explot and suitably imunise Fenris, thus if one is picked up, it can do nothing.

Update>.......... Done, Fenrisis immune to Androrat and clones, included firewall and code updates have seen to this issue.

APK checking..........

There are a number of online APK malware checkers, that run your apk through a number of anti-virus anti-malware engines ang give a comprehensive results service, all for free, Fenris should take advantage of this in some point-and-click manner.

Update>........ looking to create a simple app to do this

Security updates.

Samsung does not push security updates for this device

https://security.samsungmobile.com/etc/qsmr_list.html

Which is a real problem, am doing best to make fenris an exception to this.

.... ROM download link

V18

https://mega.nz/#!JxIwWQob!eRAKZ6KsJIAGPOauTj6g40WYQK9fmhzVCSeTwxGPuAo

V19

https://mega.nz/#!gkhUCBzL!3oanuQHbX9jNeWSOYF5Xc_ZHII6r9LqCC7vdOixJgq4

V20

fernris_t705_v0.20_XDA_Edition.zip ............... SHA256 .................... ea8c1e49a4a7a06d6794a1bb755e9a0e2fdbf9d620a1a282c92cf56761060408

https://mega.nz/#!UgRUBY4Y!453GWNh4RSZ9-RHDhfIq2jXo9hB5lITrI4WoDFsRL6w

VB_02

fernris_t705_v0.20_XDA_Edition.zip ............... SHA256 .................... 13E8FF6E76C452A71C491AEA9527EFE77D9366B869CBAE180753BCC7A81CBBC1

https://mega.nz/#!NpxEEZCb!jI-tz8j2_KwVEZn8hQZwETZR_sh7gqkfQycwEXPn7y4

....... Installation software pack ( Odin Modem and BootLoader, everything needed to flash Fenris over a stock T705 )

Fenris_Instal_software_V01.rar ............... SHA256 .................... 352d75ba93107ba6413045503cbab0a1d83e24b5a9658c0e25ac3a7a890b5319

https://mega.nz/#!so4FAKjB!c4UbKNx7EM2XkQ0ejD74L56rh5VDaCOTxqQCSmLdgGU

....... Documentation IMPORTANT

Fenris_Install_Documentation_v0.1.rar ............... SHA256 .................... 9fa83f640d5d4da0f3be0edf40de2ec6adae68abffc1a9f565c426c111dcc13a

https://mega.nz/#!8wJAkTAb!ibZ27umABKmdX_CaU0bVY3Czm8Rj9iZ8vj1npA3xVsY

Fenris_Post_install_Setup_Documentation_v0.2.rar ............... SHA256 .................... 6a7cd9f5053b4036d5fad2f98354383280774039f56f0a02a0a1407016bf2c38

https://mega.nz/#!0tIFgA4Q!7hxoGBJYJ2YgHVu4GAwUmBT0etx79_NFqoMc3ww71Fg

.... The documentation is extensive and painstaking please use it !!!

Flashing

IMPORTANT !!!!!!!!!!!!!!!!!

Fenris does not format within the script, I have noticed instabilities when format is called from the EDDIFY script, it is FAR safer and better to format the system partition from within TWRP.

In TWRP

Wipe>Advanced Wipe>Format System,Data,Cache

Covered extensively in the install documentation

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

.... Credits

Nanomod

Iron kernel

Haystack

SuperSu

Xposed