Book Image

Hacking Android

By : Srinivasa Rao Kotipalli
Book Image

Hacking Android

By: Srinivasa Rao Kotipalli

Overview of this book

With the mass explosion of Android mobile phones in the world, mobile devices have become an integral part of our everyday lives. Security of Android devices is a broad subject that should be part of our everyday lives to defend against ever-growing smartphone attacks. Everyone, starting with end users all the way up to developers and security professionals should care about android security. Hacking Android is a step-by-step guide that will get you started with Android security. You’ll begin your journey at the absolute basics, and then will slowly gear up to the concepts of Android rooting, application security assessments, malware, infecting APK files, and fuzzing. On this journey you’ll get to grips with various tools and techniques that can be used in your everyday pentests. You’ll gain the skills necessary to perform Android application vulnerability assessment and penetration testing and will create an Android pentesting lab.
Table of Contents (17 chapters)
Hacking Android
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Preface
Index

Runtime monitoring and analysis using Introspy


We saw how to set up Introspy in Chapter 1, Setting Up the Lab. This section discusses how to use Introspy in the runtime monitoring and analysis of Android apps. Introspy is an extension that is based on Cydia Substrate and hence Cydia Substrate has to be installed to work with Introspy. This extension monitors each action performed by the application such as data storage calls, intents, and so on.

Following are the steps to work with Introspy:

  1. Launch the Introspy app in your device.

  2. Choose your target application.

  3. Run and browse through the target application.

  4. Observe the adb logs (or) generate a HTML report.

Before hooking and analyzing the target application, check the databases folder of your target application just to make sure that there are no Introspy databases already available.

The following are the entries in the databases folder of my whatsapplock application:

As you can see in the preceding figure, there are no files with the name introspy...