5. Android Forensics | Learning Pentesting for Android Devices

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Learning Pentesting for Android Devices

By : Aditya Gupta

4.3 (11)

Learning Pentesting for Android Devices

4.3 (11)

By: Aditya Gupta

Overview of this book

This is an easy-to-follow guide, full of hands-on and real-world examples of applications. Each of the vulnerabilities discussed in the book is accompanied with the practical approach to the vulnerability, and the underlying security issue. This book is intended for all those who are looking to get started in Android security or Android application penetration testing. You don’t need to be an Android developer to learn from this book, but it is highly recommended that developers have some experience in order to learn how to create secure applications for Android.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Getting Started with Android Security

1. Getting Started with Android Security

Introduction to Android

Digging deeper into Android

Sandboxing and the permission model

Application signing

Android startup process

Summary

2. Preparing the Battlefield

2. Preparing the Battlefield

Setting up the development environment

Useful utilities for Android Pentest

Summary

3. Reversing and Auditing Android Apps

3. Reversing and Auditing Android Apps

Android application teardown

Reversing an Android application

Using Apktool to reverse an Android application

Auditing Android applications

Content provider leakage

Insecure file storage

OWASP top 10 vulnerabilities for mobiles

Summary

4. Traffic Analysis for Android Devices

4. Traffic Analysis for Android Devices

Android traffic interception

Ways to analyze Android traffic

HTTPS Proxy interception

Extracting sensitive files with packet capture

Summary

5. Android Forensics

5. Android Forensics

Types of forensics

Filesystems

Using dd to extract data

Using Andriller to extract an application's data

Using AFLogical to extract contacts, calls, and text messages

Dumping application databases manually

Logging the logcat

Using backup to extract an application's data

Summary

6. Playing with SQLite

6. Playing with SQLite

Understanding SQLite in depth

Security vulnerability

Summary

7. Lesser-known Android Attacks

7. Lesser-known Android Attacks

Android WebView vulnerability

Infecting legitimate APKs

Vulnerabilities in ad libraries

Cross-Application Scripting in Android

Summary

8. ARM Exploitation

8. ARM Exploitation

Introduction to ARM architecture

Setting up the environment

Simple stack-based buffer overflow

Return-oriented programming

Android root exploits

Summary

9. Writing the Pentest Report

9. Writing the Pentest Report

Basics of a penetration testing report

Writing the pentest report

Summary

Security Audit of

Table of Contents

1. Introduction

2. Auditing and Methodology

3. Conclusions

Index

Index

Using Andriller to extract an application's data

Andriller is an open source, multi-platform forensics tool written in Python by Denis Sazonov, which helps to extract some basic information from the device and could be helpful in forensic analysis. Once the analysis is complete, it generates the forensic report in HTML format.

In order to download this, we could go to the official website at http://android.saz.lt/cgi-bin/download.py and download the necessary package. If we are on a Linux or Mac environment, we could simply use the wget command in order to download and then extract the package. Since it is just a Python file, along with some other necessary binaries, there is no need to install it; instead, we could directly start using it.

$ wget http://android.saz.lt/download/Andriller_multi.tar.gz

Saving to: 'Andriller_multi.tar.gz'

100%[=============================>] 1,065,574    114KB/s   in 9.2s

2013-12-27 04:23:22 (113 KB/s) - 'Andriller_multi.tar.gz' saved [1065574/1065574...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Learning Pentesting for Android Devices

Search

Your notes and bookmarks