Reversing and Protecting Android applications · Reversing and Protecting Android applications -...

31

Transcript of Reversing and Protecting Android applications · Reversing and Protecting Android applications -...

Page 1: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 2: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 3: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 4: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 5: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 6: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 7: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 8: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 9: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
Page 10: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
Page 11: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 12: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 13: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://code.google.com/p/android-apktool/
https://code.google.com/p/android-apktool/
https://code.google.com/p/android-apktool/
Page 14: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 15: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 16: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://code.google.com/p/dex2jar/
Page 17: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
http://jd.benow.ca/
http://varaneckas.com/jad/
https://bitbucket.org/mstrobel/procyon
Page 18: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 19: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://code.google.com/p/androguard/
https://github.com/skylot/jadx
http://www.android-decompiler.com/
http://www.android-decompiler.com/
http://www.android-decompiler.com/
Page 20: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 21: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://santoku-linux.com/
https://santoku-linux.com/
https://santoku-linux.com/
Page 22: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 23: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 24: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 25: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 26: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://github.com/scottyab/secure-preferences
https://github.com/scottyab/secure-preferences
https://github.com/scottyab/secure-preferences
https://guardianproject.info/code/sqlcipher
https://guardianproject.info/code/iocipher
http://facebook.github.io/conceal/
Page 27: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 28: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 29: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 30: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 31: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,

Dynamic Analysis of Android Apps - OWASP IL 2014 Analysis of Android Apps OWASP IL 2014 Erez Metula , Application Security Expert AppSec Labs (Founder) ErezMetula@AppSec-Labs.com

Dynamic Analysis of Android Apps - OWASP IL 2014 Analysis of Android Apps OWASP IL 2014 Erez Metula , Application Security Expert AppSec Labs (Founder) [email protected]

OWASP Goes Mobile - SANS · PDF fileThe OWASP Mobile Security Project aims to fill ... No concept of “Same Origin Policy” SMS Attacks ... Recent Trojaned Android App’s. 6

OWASP Goes Mobile - SANS · PDF fileThe OWASP Mobile Security Project aims to fill ... No concept of “Same Origin Policy” SMS Attacks ... Recent Trojaned Android App’s. 6

MyCERT-3-PST-HoneynetConf-Reversing Android Malwareindex-of.co.uk/readings/HPW2011 - Reversing Android... · Backdoor o TCP socket on ports 5432, 4501 or 6543 o Another back door

MyCERT-3-PST-HoneynetConf-Reversing Android Malwareindex-of.co.uk/readings/HPW2011 - Reversing Android... · Backdoor o TCP socket on ports 5432, 4501 or 6543 o Another back door

OWASP The OWASP Foundation

OWASP The OWASP Foundation

OWASP Bangalore meet - Android Mobile Security

OWASP Bangalore meet - Android Mobile Security

OWASP @ ISCTE-IUL, OWASP e OWASP Portugal

OWASP @ ISCTE-IUL, OWASP e OWASP Portugal

Android Building, Testing and reversing

Android Building, Testing and reversing

Securing Android Applications Dario Incalza - OWASP · 2020-01-17 · Securing Android Applications • Use secure best coding practices • Protect, obfuscate and encrypt your application

Securing Android Applications Dario Incalza - OWASP · 2020-01-17 · Securing Android Applications • Use secure best coding practices • Protect, obfuscate and encrypt your application

OWASP German Chapter Stammtisch Initiative/Ruhrpott · PDF fileOWASP German Chapter Stammtisch Initiative/Ruhrpott ... Android Internals ... adb shell Android Debug Bridge

OWASP German Chapter Stammtisch Initiative/Ruhrpott · PDF fileOWASP German Chapter Stammtisch Initiative/Ruhrpott ... Android Internals ... adb shell Android Debug Bridge

Android Reversing - ROOTCON

Android Reversing - ROOTCON

Android Reverse Engineering - Internet Security Auditors€¦ · Malware identification in Android apps . OWASP 4 Reverse engineering: definition and objectives Definition Refers

Android Reverse Engineering - Internet Security Auditors€¦ · Malware identification in Android apps . OWASP 4 Reverse engineering: definition and objectives Definition Refers

Android Reverse Engineering - Internet Security Auditors ... · Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. ... Android

Android Reverse Engineering - Internet Security Auditors ... · Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. ... Android

Reversing Android Malware - Hack In The Box Security ...conference.hitb.org/hitbsecconf2011kul/materials/D1T1 - Mahmud Ab... · Reversing Android Malware ... - Spyeye’s’fake’security’tool

Reversing Android Malware - Hack In The Box Security ...conference.hitb.org/hitbsecconf2011kul/materials/D1T1 - Mahmud Ab... · Reversing Android Malware ... - Spyeye’s’fake’security’tool

EXCELLENCE THROUGH EDUCATION Hacking the Android APK … · testing and APK reversing basics. The tools and techniques imparted in this training will help ... Hacking the Android

EXCELLENCE THROUGH EDUCATION Hacking the Android APK … · testing and APK reversing basics. The tools and techniques imparted in this training will help ... Hacking the Android

OWASP Seraphimdroid guide and documentation - …inspiratron.org/OWASPSeraphimdroid/SeraphimdroidDocumentation.pdf · Android users face many threats and ... every application operates

OWASP Seraphimdroid guide and documentation - …inspiratron.org/OWASPSeraphimdroid/SeraphimdroidDocumentation.pdf · Android users face many threats and ... every application operates

Secure!Android!Applicaons! The!OWASP!Way!Android Crash Course- Essentials!! Permissions! Some!developers!go!overboard!! Ques/onable!apps!oqen!requestridiculous!permissions!too!

Secure!Android!Applicaons! The!OWASP!Way!Android Crash Course- Essentials!! Permissions! Some!developers!go!overboard!! Ques/onable!apps!oqen!requestridiculous!permissions!too!

Review OWASP 2014 - OWASP Perú

Review OWASP 2014 - OWASP Perú

MyCERT-3-PST-HoneynetConf-Reversing Android Malware · Android Malware Technology & Innovation Malicious piece of codes. Infection methods: o Infecting legitimate apps - Mod app with

MyCERT-3-PST-HoneynetConf-Reversing Android Malware · Android Malware Technology & Innovation Malicious piece of codes. Infection methods: o Infecting legitimate apps - Mod app with

UI-Redressing-Angriffe auf Android - OWASP · CONFidence, SIGINT, PHDays, ... Twitter: @mniemietz . OWASP 3 Überblick Einführung Angriffe und Gegenmaßnahmen UI-Redressing Tapjacking

UI-Redressing-Angriffe auf Android - OWASP · CONFidence, SIGINT, PHDays, ... Twitter: @mniemietz . OWASP 3 Überblick Einführung Angriffe und Gegenmaßnahmen UI-Redressing Tapjacking

Tales of Practical Android Penetration Testing … of Practical Android Penetration Testing (Mobile Pentest Toolkit) Alexander Subbotin OWASP Bucharest AppSec 2018 About Me •About

Tales of Practical Android Penetration Testing … of Practical Android Penetration Testing (Mobile Pentest Toolkit) Alexander Subbotin OWASP Bucharest AppSec 2018 About Me •About