PoC app which takes advantage of Android's SmsReceiverService being exported to fake an incoming SMS with no permissions. - View it on GitHub