Android Pentesting 101

سرفصل های دوره

1 - Introduction

1 - Introduction

2 - Disclaimer.html

2 - Setting Up your hacking environment

3 - Setting up Mobexler

4 - Emulators

5 - Setting up Genymotion Android Emulator

6 - Setting up Android Studio Emulator Android Emulator

7 - Setting up Nox Player

8 - Rooting

9 - Connecting BurpSuite with Android Device

10 - Installing your first application DIVA

3 - Getting started with Android

11 - Introduction to Android Applications

12 - Android Architecture Stack

13 - Android Components

14 - Android File System

15 - Android Data Storage Options

16 - Transferring data between Device and PC

17 - Extracting Applications using APK Extractor

18 - Decompiling Applications using dex2jar

19 - Decompiling applications using Jadx GUI

4 - Android Basics

20 - APK Contents

21 - Dalvik

22 - Smali

23 - Webviews

24 - Application Signing Verification

25 - AndroidManifestxml file

5 - OWASP Mobile TOP 10

26 - What is OWASP

27 - M1 Improper Platform Usage

28 - M2 Insecure Data Storage

29 - M3 Insecure Communication

30 - M4 Insecure Authentication M5 Insufficient Cryptography

31 - OWASP M6 M7 M8 M9 M10

32 - OWASP Mobile Top 10 2023

6 - Static Analysis

33 - What is Static Analysis

34 - MobSF

35 - Cloudsek BeVigil

36 - Yaazhini

37 - SharedPreferences Analysis

38 - Analysing other data storage options

39 - Logcat

40 - Pidcat

41 - Hardcoded Credentials

42 - Drozer

43 - Exploiting Applications using Drozer

44 - Firebase Misconfigurations

45 - Pasteboard

46 - Hot Patching

47 - WebView Related Vulnerabilities

7 - Dynamic Analysis

48 - Setting up platform tools

49 - ADB

50 - Frida Objection

51 - FridaCodeShare

52 - Bypassing Root Detection using Frida

53 - Bypassing Root Detection using Medusa

54 - Bypassing Root Detection using Objection

55 - Bypassing Root Detection using Magisk

56 - Bypassing SSL Pinning using Frida

57 - Bypassing SSL Pinning using Objection

58 - Bypassing SSL Pinning by overwriting packaged CA Certificate with custom CA Cert

59 - Bypassing SSL Pinning using androidunpinner

60 - Fingerprint Detection Bypass

8 - Progressive Web Application Attacks

61 - Progressive Web Applications Intrdouction

62 - Bypassing Root and SSL Pinning in PWAs

9 - Live Attacks

63 - Disclaimer.html

64 - Live Attack 1 Insecure Permissions

65 - Live Attack 2 Application Signing Janus Vulnerability

66 - Live Attack 3 Hardcoded Credentials

67 - Live Attack 4 Shared Preferences

68 - Live Attack 5 Insufficient Cryptography

69 - Live Attack 6 Non Parameterized SQL Query

70 - Live Attack 7 Insecure Logging

71 - Live Attack 8 Webview XSS

72 - Live Attack 9 Pasteboard Monitor

73 - Live Attack 10 Screenshot and Background Screen Caching

74 - Live Attack 11 Root Detection Bypass SSL Pinning Bypass

75 - Live Attack 12 Fingerprint Bypass

76 - Live Attack 13 No Rate Limit

77 - Live Attack 14 Authentication Issues Status and Response Code Manipulation

78 - Live Attack 15 Business Logic Issue

79 - Live Attack 16 Flutter APK Root SSL Pinning Bypass

10 - Tips Tricks

80 - Android Pentesting Checklist

80 - MobileApp-Checklist-2017.xlsx

81 - Android Pentesting Mindmap

81 - android-pentesting.zip

82 - Android Pentesting Nuclei Templates

83 - Android Pentesting Reports Private

83 - Reports.zip

84 - Using objection Frida without Rooting the device

85 - Android Frida Scripts

86 - Android Bug Bounty Journey

11 - Bonus Lecture Conclusion Links

87 - Conclusion

88 - Links Bonus.html

139,000 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: Udemy