manifestsecurity.com
Android Application Security Part 6-Let the Fun Begin – Aditya Agrawal
https://manifestsecurity.com/android-application-security-part-6-2
Security Researcher. RailFan. Foodie. October 13, 2015. Android Application Security Part 6-Let the Fun Begin. In the upcoming post i will explain the various Top 10 Mobile Risk 2014. According to OWASP.org. While attacking a vulnerable android application . I will using FourGoats App of OWASP GoatDroid Project. Which is location-based social network vulnerable app and also HerdFinancial App of OWASP Goatdroid Project. Getting Started with GoadDroid Project is already their on their Project. Tap on Desti...
manifestsecurity.com
Appie – Android Pentesting Portable Integrated Environment – Aditya Agrawal
https://manifestsecurity.com/appie
Security Researcher. RailFan. Foodie. Appie – Android Pentesting Portable Integrated Environment. Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual Machine(VM) or dualboot. It is completely portable and can be carried on USB stick or your smartphone. Why Appie Was Created? Difference between Appie and Existing Environments. Tools Included in Appie. What they are saying. Why Appie was created?
manifestsecurity.com
Appie New Release – Update Instructions Included – Aditya Agrawal
https://manifestsecurity.com/appie-release
Security Researcher. RailFan. Foodie. Appie New Release – Update Instructions Included. First of all i would like to thank everyone for their support in making Appie a Huge Success. It is only one month after releasing Appie and i have received awesome response from the users. Within one month there are about 2250 downloads. Of Appie which is highest for any existing alternative to Appie. See here. About Appie journey till now. Below are the tools which are included in Appie in this release. 8211; This w...
manifestsecurity.com
Android Application Security Part 7-Understanding AndroidManifest.xml File – Aditya Agrawal
https://manifestsecurity.com/android-application-security-part-7
Security Researcher. RailFan. Foodie. October 13, 2015. Android Application Security Part 7-Understanding AndroidManifest.xml File. AndroidManifest.xml is very important part of an APK file espically when security is concerned. Every service,ContentProvider,activity,Broadcast Receiver need to be mentioned in the AndroidManifest.xml file. Let’s learn more about AndroidManifest file in a short while. First i would like to tell several important methods to view decompiled AndroidManifest.xml file. But a com...
mobilephonedevelopment.com
New Mobile Security Wiki | Mobile Phone Development
http://www.mobilephonedevelopment.com/archives/2351
Mobile App Development Insights from Simon Judge, Android Developer. Skip to primary content. Skip to secondary content. New Mobile Security Wiki. May 5, 2015. If you are interested in mobile security you should take a look at the Mobile Security Wiki. It provides details of forensics, development, static analysis, dynamic analysis, reverse engineering tools as well as obfuscators, testing distributions and example apps. It also references libraries, best practices, books, papers and presentations. How w...
ozergoker.blogspot.com
The Blog: Mobile Security Wiki
http://ozergoker.blogspot.com/2015/05/mobile-security-wiki.html
Wednesday, May 13, 2015. Posted by Ozer Goker. Subscribe to: Post Comments (Atom).
manifestsecurity.com
Android Application Security Part 4-Get to know about your Arsenals – Aditya Agrawal
https://manifestsecurity.com/android-application-security-part-4
Security Researcher. RailFan. Foodie. October 13, 2015. Android Application Security Part 4-Get to know about your Arsenals. For all the demos below i have used FourGoats Application from OWASP-Goatdroid-Project. You can download from here. Below i have described must know methods of adb but i would recommend you to go through ADB Documentation. To gain a better understanding of it. Adb devices – It Prints a list of all attached emulator/device instances. And interacting with the Dalvik VM, other apps’ I...
manifestsecurity.com
Android Application Security Part 10 – Insufficient Transport Layer Protection – Aditya Agrawal
https://manifestsecurity.com/android-application-security-part-10
Security Researcher. RailFan. Foodie. October 14, 2015. Android Application Security Part 10 – Insufficient Transport Layer Protection. Insufficient Transport Layer Protection holds 3rd. Position at OWASP Mobile Top 10. Lack of Certificate Inspection:. Android Application fails to verify the identity of the certificate presented to it. Most of the application ignore the warnings and accept any self-signed certificate presented. Some Application instead pass the traffic through an HTTP connection. Hackers...
