Automated Third-Party Library Detection for Android Applications - Are We There Yet?
Explore automated third-party library detection for Android apps, comparing tools, addressing challenges, and discussing effectiveness, efficiency, and obfuscation-resilient capabilities.
Android Penetration Testing
Explore advanced Android security techniques including reverse engineering, SSL unpinning, and vulnerability detection in this hands-on penetration testing session.
Path Traversal Attacks on Android - Ekoparty 2023
Explora vectores de ataque de path traversal en Android, técnicas para sobrescribir y leer archivos internos, y métodos de mitigación. Presentado por Anderson Valencia, pentester de aplicaciones web y móviles.
Common Android Deep Links and WebViews Exploitations - Mobile Hacking
Explore Android deep links and WebViews vulnerabilities, learn exploitation techniques, and discover practical mitigation strategies to enhance mobile app security against emerging threats.
Preventing Malware Attacks in Mobile Apps - Ekoparty Summer Workshop 2024
Aprende estrategias prácticas para fortalecer la seguridad de aplicaciones móviles contra malware, optimizando la experiencia del usuario. Incluye demostraciones y está dirigido a profesionales de seguridad y desarrollo.
Threat Modeling with PASTA - Application Security Case Studies
Explore risk-centric threat modeling using PASTA methodology, with case studies in IoT, E-Commerce, and Mobile Applications. Learn to align design and coding techniques with application use cases and potential threats.
SPArring with the Security of Single Page Applications
Explore security challenges in Single Page Applications with insights on automating detection and mitigation strategies for modern web development vulnerabilities.
Automating API Penetration Testing Using Fuzzapi
Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.
The Attacker's Guide to Exploiting Secrets in the Universe
Explore methods to discover and exploit secrets in git repositories, containers, and compiled apps. Learn about vulnerabilities in API keys and credentials across various environments.
A Complete Guide to OWASP and Mobile Application Security
Master mobile application security essentials using OWASP standards, from identifying vulnerabilities to implementing secure coding practices and data protection strategies for creating safer mobile applications.
Sexy Mobile App Attacks by Example - 2019
Comprehensive review of security flaws in Android and iOS apps, covering anonymized findings, vulnerabilities in open-source apps, and issues in government-mandated applications. Practical insights for mobile security enthusiasts.
Click and Dagger - Denial and Deception on Android Smartphones
Explore advanced techniques for denial and deception on Android smartphones, focusing on security vulnerabilities and potential exploits in mobile operating systems.
The Diary of an Inexperienced Bug Hunter - Introduction to Android Hacking
Explore Android app security, bug bounty programs, and essential tools for mobile penetration testing. Learn structure analysis and gain practical insights for successful Android hacking.
Insecurity Through Obscurity - Exploiting Obfuscated Android APKs
Explore techniques to identify open source libraries in obfuscated Android APKs and learn how common obfuscation methods can lead to vulnerable Java object deserialization, enhancing your bug bounty hunting skills.
Mobile Application Security Threats Through the Eyes of the Attacker
Explore mobile app security threats from a hacker's perspective, covering attack vectors, data storage, leakage, HTTPS, SSL, firewalls, and OS controls with expert Jason Haddix.
iOS Hacking - Filesystem Basics
Explore iOS app filesystem interactions, data storage methods, and file protection attributes. Learn to analyze artifacts and use runtime instrumentation for comprehensive iOS application security assessment.
SecureMe Droid - Android Security Application for Vulnerability Notifications
SecureMe - Droid notifies users of known vulnerabilities in installed Android apps. It uses a client-server model, NVD CVE database, and respects user privacy while providing easy configuration and scheduled scanning options.
Automated Mobile Application Security Assessment with MobSF - AppSec EU 2016
Discover automated mobile app security assessment using MobSF. Learn techniques for identifying vulnerabilities and enhancing protection in mobile applications.
Mobile Application Assessments By The Numbers - A Holistic View
Explore mobile app security through data-driven insights, examining vulnerabilities and best practices for comprehensive assessments in this OWASP presentation.
So, You Want To Use A WebView? - Security Considerations and Best Practices
Explore WebView security challenges, interfaces, testing methods, and threat models. Learn best practices for implementing secure WebViews in mobile applications.
Uncovering OWASP's Mobile Risks in iOS Apps - AppSec California 2015
Explore iOS app vulnerabilities through reverse engineering techniques. Learn to extract, analyze, and identify common security risks in mobile applications using real-world examples.