Attacking Android Applications
summary
Walks through concrete attacks: unzip an APK, use apktool to recover AndroidManifest and resources, inspect classes.dex and smali to find a hard‑coded AES key that encrypts all users, and use Frida hooks to intercept webview loadUrl and cipher.final at runtime. Shows man‑in‑the‑middle with mitmproxy / Burp to read and modify traffic, demonstrates the open‑source fried graph for class relationships, and ends with applicable countermeasures like SSL pinning and root/emulator detection.
AI-written summary · about
chapters (10)
- 0:00Start
- 6:36Build Process
- 11:10How Does the App Handle Authentication
- 11:50How Does the App Communicate
- 15:31Apktool
- 19:17Cryptography
- 28:15Man-in-the-Middle Proxies
- 29:06Dynamic Instrumentation Toolkit
- 32:10Xposed Framework
- 35:28Man-in-the-Middle Attack
related talks
47mAttacking Android Applications
01h 07mHow to attack (and secure) an Android app: an introduction
45mHacking and protecting Android apps
42mAttack & Defend Mobile Apps
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
28mSecure Development whit Android
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
45mI just hacked your app!