B.TECH CYBERSECURITY WORKSHOP

Mobile Security Awareness Scanner

Explore what a normal webpage can learn from your Android browser, try permission prompts intentionally, and generate a local awareness report.

Before you begin

Use only your own device or a participant's device with informed consent. This is an awareness tool, not an exploit or a penetration test.

The web host may independently keep normal server logs (for example, request time and IP address). This page does not send the displayed scan results to a collection server.

1. Device & browser details

These values are hints from your browser and may not identify the exact phone model.

Check consent, then press Inspect.

2. Permission demonstrations

Each button triggers a browser permission request. Nothing is requested until you press a button.

Camera/microphone tests briefly request access and immediately stop the media stream. No photo, audio, or video is recorded or uploaded.

3. Generate a QR code for this page

Host this page over HTTPS first, then paste its public URL. The QR image is fetched from a third-party QR service, which receives the URL you enter.

4. Awareness report

After inspection, generate a report summarizing browser hints and which permission tests you tried. Any location you approved is included only in the local report.

What this page cannot normally access

Scanning a QR code does not itself give a website access to IMEI, contacts, call logs, SMS, saved passwords, private files, or all photos. These require other authorized pathways, user action, or in some cases a security vulnerability. Browser model information may be reduced for privacy.

Workshop takeaway: a QR code is usually a way to open a link. The risk depends on where it leads and what a user does next.