Preparing the Battlefield | Learning Pentesting for Android Devices

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Learning Pentesting for Android Devices

By : Aditya Gupta

4.3 (11)

Learning Pentesting for Android Devices

4.3 (11)

By: Aditya Gupta

Overview of this book

Learning Pentesting for Android Devices

Learning Pentesting for Android Devices

Credits

Credits

Foreword

Foreword

About the Author

About the Author

Acknowledgments

Acknowledgments

About the Reviewers

About the Reviewers

www.PacktPub.com

www.PacktPub.com

Preface

Preface

Free Chapter

Getting Started with Android Security

Getting Started with Android Security

Introduction to Android

Digging deeper into Android

Sandboxing and the permission model

Application signing

Android startup process

Summary

Preparing the Battlefield

Preparing the Battlefield

Setting up the development environment

Useful utilities for Android Pentest

Summary

Reversing and Auditing Android Apps

Reversing and Auditing Android Apps

Android application teardown

Reversing an Android application

Using Apktool to reverse an Android application

Auditing Android applications

Content provider leakage

Insecure file storage

OWASP top 10 vulnerabilities for mobiles

Summary

Traffic Analysis for Android Devices

Traffic Analysis for Android Devices

Android traffic interception

Ways to analyze Android traffic

HTTPS Proxy interception

Extracting sensitive files with packet capture

Summary

Android Forensics

Android Forensics

Types of forensics

Filesystems

Using dd to extract data

Using Andriller to extract an application's data

Using AFLogical to extract contacts, calls, and text messages

Dumping application databases manually

Logging the logcat

Using backup to extract an application's data

Summary

Playing with SQLite

Playing with SQLite

Understanding SQLite in depth

Security vulnerability

Summary

Lesser-known Android Attacks

Lesser-known Android Attacks

Android WebView vulnerability

Infecting legitimate APKs

Vulnerabilities in ad libraries

Cross-Application Scripting in Android

Summary

ARM Exploitation

ARM Exploitation

Introduction to ARM architecture

Setting up the environment

Simple stack-based buffer overflow

Return-oriented programming

Android root exploits

Summary

Writing the Pentest Report

Writing the Pentest Report

Basics of a penetration testing report

Writing the pentest report

Summary

Security Audit of

Table of Contents

1.

2. Auditing and Methodology

3. Conclusions

Index

Index

Chapter 2. Preparing the Battlefield

In the previous chapter, we learned the basics of Android security and its architecture. In this chapter, we will read about setting up our Android Pentesting lab, which will include downloading and configuring Android SDK and Eclipse. We'll understand ADB in depth and learn how to create and configure Android Virtual Devices (AVDs).

We will cover the following aspects in this chapter:

Android Debug Bridge
Introduction and setting up of Burp Suite
Introduction to APKTool

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Learning Pentesting for Android Devices

Search

Your notes and bookmarks