Android Services 101 

This report explains how Android services, particularly AIDL-based services common in OEM/system apps, can expose privileged functionality if permission checks are weak. It outlines methods to enumerate and interact with services (service list, service call, dumpsys), demonstrates reverse engineering of a MediaTek AIDL service to identify callable methods and permission logic, and provides practical guidance to test for missing or inadequate authorization checks during app and OEM ROM reviews.