Android Application Static and Dynamic Security Assessment
- Description
- Curriculum
- FAQ
- Reviews
This whole course is divided into 6 Sections which covers different necessary portions for Android Application Security and they goes like this :-:
- Lab Setup
- Introduction to Android
- Static Analysis tools for Android Applications
- Getting Started with DIVA-Beta Application
- Pentester Lab Applications
- Dynamic and Automated Analysis
This course require few things from learner, such as :-:
- Some hands on experience with any linux operating system, best for Kali Linux users.
- Basic code level understanding of JAVA language.
Minimum System requirements for this course :-:
- CPU — i5 7th Gen
- RAM — 12 GB
- Storage — 250 GB SSD
Who this course is for:
- All web application security analyst.
- All those security enthusiast.
- All those newbies into hacking.
- All those API security analyst.
- A total beginner, with a curious mind and wants to be an app developer
- Anyone who wants to become an Android Developer
- Penetration testers who want to do a Penetration Testing against Android mobile phones.
- Application developers who want to write secure mobile applications.
- Anyone who want to protect themselves against mobile attacks.
- Programmers who are interested in building Android apps
- Technical or non-technical entrepreneurs who want to start mobile app business
- Anyone who wants to create Android Applications
- Those who want to develop an Android Hacking
This course will give you a beginner to intermediate level knowledge in android application security. Audio and Video quality might not be the best, but these are the thing you need to know to get started in Android application security.
-
1
Install kali Linux in VMware Workstation Professional or Player -
2
Configure WSL Kali Linux in Windows Machine
-
3
Genymotion Installation
If Genymotion put extra load on your system, then try installing NOX-Player which has same working functionality but in a much lighter package.
I personally use NOX-Player on daily basis, but Genymotion is the popular one because of its SAAS working model.
-
10
Decompiling Android Application with JADX
Lets get stated with android application reverse engineering. Application are available in ZIP file to download
-
11
Decompiling Android Application with QARK (Quick Android Review Kit by LinkedIn)
-
12
Reading JAR File with JD-GUI
-
13
Reading DEx File with ByteCode-Viewer
-
14
Decompile Android Application With APKTOOL
-
15
Reading Small with Android Studio and Convert DEx file into JAR with DEx2JAR
-
16
Extracting Java and Smali Code with MobSF (Mobile Security Framework)
-
17
Installing MobSF in Windows OS
-
18
Insecure Logging
-
19
Hardcoding Issue Part 1
-
20
Insecure Data Storage Part 1 || Shared Preferences
-
21
Insecure Data Storage Part 2 || SQLite Database
-
22
Insecure Data Storage Part 3 || Temp Files
-
23
Insecure Data Storage Part 4 || External Storage
-
24
Improper Input Validation || SQL-injection
-
25
Improper Input Validation || Web View Methods
-
26
Access Control Issue Part 1
-
27
Access Control Issue Part 2
-
28
Access Control Issue Part 3
-
29
Improper Input Validation Part 2
-
30
Improper Input Validation Issue Part 3 || Input Fuzzing
