Hacking Android Applications for Bug Bounty and Pentesting

سرفصل های دوره

Learn to hack Android applications using the cutting edge pentesting techniques and tools.

1 - Introduction to Course

1 - Introduction to Course

2 - Fundamentals of Android

2 - Introduction to Android Architecture

3 - Android Run time ART

4 - Rooting Basics

3 - Setup Device and Lab

5 - Introduction to Genymotion

6 - Install apktool in Linux

7 - Install Frida Tools in Linux and Start Frida Server in Android

8 - Install adb in Linux

8 - resources.zip

9 - Install Jadx in Linux

10 - Install MobSF in Linux

11 - Install Objection in Linux

12 - Install Runtime Mobile Security RMS in Linux

13 - Install Frida Tools in Windows

14 - Install apktool in Windows

15 - Install adb in Windows

16 - Install Jadx in Windows

17 - Install MobSF in Windows

18 - Install Objection in Windows

19 - Install Runtime Mobile Security RMS in Windows

4 - Static Analysis

20 - Pulling APK from deviceplaystore

21 - DecompileRecompile apk using apktool

22 - Taking the android app apart

23 - Patching application manually to enable WebView debugging

5 - Analysis Types

24 - Static vs Dynamic

6 - Dynamic Analysis

25 - Intercept Traffic using Burpsuite

26 - Root Detection Bypass

27 - SSL Pinning Bypass

28 - Patching apps using objection

29 - Frida code share & Startup scripts

7 - Android Bug Hunt

30 - Insecure Data File Storage Part 1

31 - Insecure Data File Storage Part 2

32 - Insecure Data Storage Example 1

33 - Insecure Data Storage Example 2

34 - Insecure Data Storage Example 3

35 - Hardcoding Issues Example 1

36 - Hardcoding Issues Example 2

37 - API Access Control Issues

8 - Real World Findings

38 - Report Periscope android app deeplink leads to CSRF in follow action

39 - Report Bypassing biometrics security functionality in Android

40 - Report Insecure deeplink leads to sensitive information disclosure

41 - Report Steal arbitrary files from mobile device

42 - Report Disclosure of all uploads via hardcoded api secret in Android app

43 - Report Insecure Data Storage in Vine Android App

44 - Report No Session Expiry on Password change action

9 - Conclusion

45 - Conclusion

139,000 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: Udemy-Training