Mobile app analysis with Santoku Linux
summary
Santoku Linux is a bootable Debian-based distro that bundles mobile forensics, malware and security tools so installing dozens of utilities is unnecessary; demos show Santoku Linux booting, apt-get updates working and ADB commands pulling full logical and filesystem acquisitions. The open-source app AFLogical extracts contacts SMS call logs; apktool dex2jar and JD-GUI reverse APKs; Wireshark and netcat capture traffic. Empirical results cited: ~80 apps scanned, 15% iOS 20% Android fail MITM, 25% iOS store plaintext passwords, and bundled tools successfully reveal sideloading and SMS‑intercepting malware.
AI-written summary · about
chapters (26)
- 0:00Intro
- 1:53Why Santoku Linux
- 3:12Tools
- 4:12Installing Santoku
- 4:36Running Santoku in a VM
- 5:33Challenges
- 6:37Android Emulator
- 8:06Mobile forensics
- 12:37Device backup
- 13:00Data analysis
- 13:33iPhone backup analyzer
- 16:51Demo
- 24:30Logical analysis
- 25:44Mobile security
- 26:58Mobile security testing
- 27:22Maninthemiddle
- 31:03Why is mobile security difficult
- 34:43Santoku
- 35:19iOS
- 42:05Bloomberg Antivirus
- 43:43APKTool
- 44:10Device ID
- 44:28Boot Complete
- 45:29Install method
- 47:35Profile apps
- 47:46Contact us
related talks
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
57m(In)Security of Mobile Banking
33mApp-etite for Destruction: a look into the cookbook of an attacker
44mAuditing Your APKs Like a Black Hat Hacker
42mIf 6,000 Mobile Malware Applications Could Talk! Ow, They Do, And A Lot!
32mHack Your Own App: Getting Started with Mobile Penetration Testing
32mApp-etite for Destruction: a look into the cookbook of an attacker
50mQARK: Android App Exploit and SCA Tool