In this repo you will find 2 applications: one that exposes an Android bound Service, and one that binds to this Service. These applications are described in the Cobra Den post "Attacking Bound Services on Android."