Upload File

reversing and protecting android applications · reversing and protecting android applications -...

  • Home
  • Documents
  • Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
31

Upload: others

Post on 29-May-2020

19 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 2: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 3: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 4: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 5: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 6: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 7: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 8: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 9: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
Page 10: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
https://github.com/egirault/googleplay-api
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apps.evozi.com/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
http://apify.ifc0nfig.com/static/clients/apk-downloader/
Page 11: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 12: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 13: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://code.google.com/p/android-apktool/
https://code.google.com/p/android-apktool/
https://code.google.com/p/android-apktool/
Page 14: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 15: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 16: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://code.google.com/p/dex2jar/
Page 17: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
http://jd.benow.ca/
http://varaneckas.com/jad/
https://bitbucket.org/mstrobel/procyon
Page 18: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 19: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://code.google.com/p/androguard/
https://github.com/skylot/jadx
http://www.android-decompiler.com/
http://www.android-decompiler.com/
http://www.android-decompiler.com/
Page 20: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 21: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://santoku-linux.com/
https://santoku-linux.com/
https://santoku-linux.com/
Page 22: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 23: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 24: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 25: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 26: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
https://github.com/scottyab/secure-preferences
https://github.com/scottyab/secure-preferences
https://github.com/scottyab/secure-preferences
https://guardianproject.info/code/sqlcipher
https://guardianproject.info/code/iocipher
http://facebook.github.io/conceal/
Page 27: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 28: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 29: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 30: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,
Page 31: Reversing and Protecting Android applications · Reversing and Protecting Android applications - VIII OWASP Spain Chapter Meeting 2014 presentation Keywords Android, pof, OWASP, reversing,

Review OWASP 2014 - OWASP Perú

hashdays 2011: Tobias Ospelt - Reversing Android Apps - Hacking and cracking Android apps is easy

Mobile Hacking Android - OWASP · – Intern – Marko Winkler / Mobile Hacking - Android 15.02.2017 11 Android Manifest system must know that the component exists by reading the

Challenges in Android Malware Detection - OWASP · PDF fileChallenges in Android Malware Detection OWASP BeNeLux Days @ Belval Friday, 18th March 2016 KEVIN ALLIX, [email protected]

Mobile Hacking Android - OWASP · Einführung - Terminologie – Intern – Marko Winkler / Mobile Hacking - Android 15.02.2017 5 Services service is a component that runs in the

MyCERT-3-PST-HoneynetConf-Reversing Android Malwareindex-of.co.uk/readings/HPW2011 - Reversing Android... · Backdoor o TCP socket on ports 5432, 4501 or 6543 o Another back door

OWASP (Membership) and new OWASP Projects · OWASP 7 OWASP

Securing Android Applications Dario Incalza - OWASP Android Applications @h4oxer 12. Securing Android Applications ... Debugger (GDB)

Dynamic Analysis of Android Apps - OWASP IL 2014 Analysis of Android Apps OWASP IL 2014 Erez Metula , Application Security Expert AppSec Labs (Founder) [email protected]

net reverse engineering - OWASP...Revealing .NET “hidden features” using reversing • Let ’s extend the capabilities of the .NET framework • Reverse engineering the framework

UI-Redressing-Angriffe auf Android - OWASP · CONFidence, SIGINT, PHDays, ... Twitter: @mniemietz . OWASP 3 Überblick Einführung Angriffe und Gegenmaßnahmen UI-Redressing Tapjacking

MyCERT-3-PST-HoneynetConf-Reversing Android Malware · Android Malware Technology & Innovation Malicious piece of codes. Infection methods: o Infecting legitimate apps - Mod app with

OWASP – Top 10 · • OWASP Code Review Guide • OWASP Testing Guide • OWASP Top Ten Project . OWASP – TOP 10 • OWASP Top 10 Web Application Security Risks for 2010 are:

Android App Reversing

Reversing the Apple Sandbox OWASP EEE 2015 · 2020. 1. 17. · October 9, 2015 Reversing the Apple Sandbox 22 Liniarized Regular Expression regex → NFA (Non-deterministic Finite

Vulnerability Prediction in Android Apps - OWASP · PDF fileVulnerability Prediction in Android Apps Android apps are an attractive target et Google play has over 775K apps and over

The Dark Side of Android Applications - OWASP...The Dark Side of Android Applications Michael Spreitzenbarth Lehrstuhl für Informatik 1 Universität Erlangen-Nürnberg 07.11.2012

OWASP Seraphimdroid guide and documentation - …inspiratron.org/OWASPSeraphimdroid/SeraphimdroidDocumentation.pdf · Android users face many threats and ... every application operates

Secure!Android!Applicaons! The!OWASP!Way!Android Crash Course- Essentials!! Permissions! Some!developers!go!overboard!! Ques/onable!apps!oqen!requestridiculous!permissions!too!

Reversing and Auditing Android’s Proprietary Bits - REcon J. Drake-Reversing... · Reversing and Auditing Android’s Proprietary Bits ... ~/android/cluster$ grep ^/system/lib

OWASP Bangalore meet - Android Mobile Security

Challenges in Android Malware Detection - OWASP · Android Malware DetectionI The traditional Antivirus method Collect supicious samples Analyze each sample (Static and/or dynamic

Tales of Practical Android Penetration Testing … of Practical Android Penetration Testing (Mobile Pentest Toolkit) Alexander Subbotin OWASP Bucharest AppSec 2018 About Me •About

Android Reverse Engineering - Internet Security Auditors ... · Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. ... Android

Anti-Reversing 1 Anti-Reversing Techniques Anti-Reversing 2 Anti-Reversing Here, we focus on machine code o Previously, looked at Java anti-reversing

[OWASP-TR Mobil Güvenlik Çalıştayı 2015] Fatih Emiral - Android Uygulamalara Malware Yerleştirme

OWASP The OWASP Foundation

OWASP German Chapter Stammtisch Initiative/Ruhrpott · PDF fileOWASP German Chapter Stammtisch Initiative/Ruhrpott ... Android Internals ... adb shell Android Debug Bridge

Android Building, Testing and reversing

Android Reversing - ROOTCON

New Privacy in Android 11 and OWASP Mobile Security · 2020. 8. 21. · OWASP Flagship Projects Tool Projects OWASP Amass OWASP CSRFGuard OWASP Defectdojo OWASP Dependency-Check OWASP

Android Reverse Engineering - Internet Security Auditors€¦ · Malware identification in Android apps . OWASP 4 Reverse engineering: definition and objectives Definition Refers

OWASP Goes Mobile - SANS · PDF fileThe OWASP Mobile Security Project aims to fill ... No concept of “Same Origin Policy” SMS Attacks ... Recent Trojaned Android App’s. 6

Vulnerability Prediction in Android Apps - OWASP€¦ · 06/06/2013  · Vulnerability Prediction in Android Apps Machine learning et Leverage machine learning techniques to build

Reversing Android Malware › hitbsecconf2011kul... · Reversing’Android’Malware’ • Reversing’Process’ *.class or *.dex class Dalvik disassembling *.java decompiling disassembling