Name: Learning Pentesting for Android Devices
Author: Aditya Gupta
ISBN: 9781783288991

微信读书书城Learning Pentesting for Android Devices

首页我的书架登录

Learning Pentesting for Android DevicesAditya Gupta

微信读书推荐值

待评分

推荐

一般

不行

推荐

一般

不行

推荐

一般

不行

推荐

一般

不行

推荐(0)

一般(0)

不行(0)

阅读

9人

电子书

体验卡可读

字数

16万字

简介

This is an easytofollow guide, full of handson and realworld examples of applications. Each of the vulnerabilities discussed in the book is accompanied with the practical approach to the vulnerability, and the underlying security issue.This book is intended for all those who are looking to get started in Android security or Android application penetration testing. You don’t need to be an Android developer to learn from this book, but it is highly recommended that developers have some experience in order to learn how to create secure applications for Android.

翻译完成

切换

Learning Pentesting for Android Devices

Aditya Gupta

扉页
coverpage
+书签
Learning Pentesting for Android Devices
Credits
Foreword
About the Author
Acknowledgments
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers, and more
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Chapter 1. Getting Started with Android Security
Introduction to Android
Digging deeper into Android
Sandboxing and the permission model
Application signing
Android startup process
Summary
Chapter 2. Preparing the Battlefield
Setting up the development environment
Useful utilities for Android Pentest
Summary
Chapter 3. Reversing and Auditing Android Apps
Android application teardown
Reversing an Android application
Using Apktool to reverse an Android application
Auditing Android applications
Content provider leakage
Insecure file storage
OWASP top 10 vulnerabilities for mobiles
Summary
Chapter 4. Traffic Analysis for Android Devices
Android traffic interception
Ways to analyze Android traffic
HTTPS Proxy interception
Extracting sensitive files with packet capture
Summary
Chapter 5. Android Forensics
Types of forensics
Filesystems
Using dd to extract data
Using Andriller to extract an application s data
Using AFLogical to extract contacts, calls, and text messages
Dumping application databases manually
Logging the logcat
Using backup to extract an application s data
Summary
Chapter 6. Playing with SQLite
Understanding SQLite in depth
Security vulnerability
Summary
Chapter 7. Lesser-known Android Attacks
Android WebView vulnerability
Infecting legitimate APKs
Vulnerabilities in ad libraries
Cross-Application Scripting in Android
Summary
Chapter 8. ARM Exploitation
Introduction to ARM architecture
Setting up the environment
Simple stack-based buffer overflow
Return-oriented programming
Android root exploits
Summary
Chapter 9. Writing the Pentest Report
Basics of a penetration testing report
Writing the pentest report
Summary
Security Audit of
Table of Contents
1. Introduction
2. Auditing and Methodology
3. Conclusions
Index

简介

版权

Learning Pentesting for Android Devices