How to Hack Your Own Mobile App
summary
Focuses on Xamarin apps and demonstrates concrete attacks: jailbreaking an iPhone, installing Cydia/OpenSSH, using Clutch + Hopper to dump and modify a decrypted IPA and flip an isAuthorized return to gain access, and routing traffic through Charles/Fiddler proxy to view HTTPS. Shows defensive code snippets for certificate pinning and simple jailbreak checks plus recommendations for obfuscation, build-specific randomness and CI-driven hardening. Cites OWASP Mobile Top 10 issues (M1 improper platform usage, M3 insecure comms, M9 reverse engineering) and a finding that 92% finance apps missed at least two top-10 controls.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 4:25Common Risks
- 8:10Release Candidate List
- 10:33Insufficient Testing
- 12:50Jailbreaking
- 27:56Protection
- 33:12Secure Communication
- 38:57Summary
- 42:28Top 10 Most Breached Apps
- 44:46Plugs
related talks
58mUncovering OWASP’s Mobile Risks in iOS Apps
33mHacking and protection of Mobile Apps and backend APIs
01h 14mHacking and Injecting Your Own Code into Someone Else's App
40mBest practices for shielding mobile apps from emerging threats
38mI just hacked your app!
47mBASHing iOS Applications
32mHack Your Own App: Getting Started with Mobile Penetration Testing
32mAndroid iPhone Risks and Solutions