Runtime Riddles: Abusing Manipulation Points in the Android Source
Delve into advanced Android runtime manipulation techniques for bypassing decompilers and emulators, featuring practical demonstrations of native C++ manipulators and custom library implementation.
FluBot
Explore the inner workings of FluBot, an Android malware that impersonates banking apps, and learn about its sophisticated countermeasures against detection and analysis.
Cloak and Dagger - From Two Permissions to Complete Control of the UI Feedback Loop
Uncovers Android security flaws allowing malicious apps to control UI feedback loop, enabling stealthy attacks like credential theft and unauthorized app installations without user awareness.
Insider Attack Resistance in the Android Ecosystem
Exploring insider attack threats in mobile ecosystems and Android's multi-level defense strategies, including hardware-level protections and system software transparency to enhance user security.
The Impact of Third-party Code on Android App Security
Exploring third-party library risks in Android apps, including outdated versions, vulnerabilities, and potential solutions for improved security and automatic patching.
Sexy Mobile App Attacks by Example - 2019
Comprehensive review of security flaws in Android and iOS apps, covering anonymized findings, vulnerabilities in open-source apps, and issues in government-mandated applications. Practical insights for mobile security enthusiasts.
Android Security - Andrew Kennedy
Learn about Android security measures, including application sandboxing, permissions, and SELinux, to understand how Google protects the world's most popular mobile OS from potential threats.
Click and Dagger - Denial and Deception on Android Smartphones
Explore advanced techniques for denial and deception on Android smartphones, focusing on security vulnerabilities and potential exploits in mobile operating systems.
The Diary of an Inexperienced Bug Hunter - Introduction to Android Hacking
Explore Android app security, bug bounty programs, and essential tools for mobile penetration testing. Learn structure analysis and gain practical insights for successful Android hacking.
Finding Sensitive Data in Android Apps - LevelUpX Series 12
Explore techniques for accessing and extracting sensitive data from Android apps' internal storage, with tools and strategies for impactful bug bounty reports.
Insecurity Through Obscurity - Exploiting Obfuscated Android APKs
Explore techniques to identify open source libraries in obfuscated Android APKs and learn how common obfuscation methods can lead to vulnerable Java object deserialization, enhancing your bug bounty hunting skills.
Android Hacking Workshop - Exploiting Vulnerabilities in Mobile Apps
Explore Android hacking techniques with live demos, focusing on source code review, exported activities, and string tracing using the Injured Android app.
Implementing Android Tamper-Resistant Secure Storage in Virtualization
Explore Android's tamper-resistant secure storage implementation, including RPMB key generation, factory provisioning, and virtualization in ACRN hypervisor for multiple Linux guests and TEE instances.
SecureMe Droid - Android Security Application for Vulnerability Notifications
SecureMe - Droid notifies users of known vulnerabilities in installed Android apps. It uses a client-server model, NVD CVE database, and respects user privacy while providing easy configuration and scheduled scanning options.
Intent Security in Android: Best Practices for Developers
Explore Android intents' security implications, learn defensive techniques, and validate assumptions to build secure apps. Covers spoofing, hijacking, and data theft prevention in inter-process communications.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
Automated Mobile Application Security Assessment with MobSF - AppSec EU 2016
Discover automated mobile app security assessment using MobSF. Learn techniques for identifying vulnerabilities and enhancing protection in mobile applications.
The ABCs of Source-Assisted Web Application Penetration Testing
Learn advanced web application penetration testing techniques using source code analysis for improved vulnerability detection and assessment.
Runtime Manipulation of Android and iOS Applications - Mobile Security Testing
Hands-on exploration of runtime manipulation and memory analysis techniques for Android and iOS apps, enhancing mobile security testing skills using tools like cycript and snoop-it.
Ten Secrets to Secure Mobile Applications
Discover key strategies for securing mobile apps, focusing on encryption, web service design, and user privacy. Learn to threat model and address top vulnerabilities using OWASP Mobile Top Ten framework.
Android App Protection Techniques: Obfuscation, Packing, and Protection - APPSEC Cali 2018
Explore Android app protection techniques, including obfuscation, packing, and protection. Learn to analyze and counter these methods to identify potential malware and enhance app security.