Hacking Android

Key FeaturesUnderstand and counteract against offensive security threats to your applicationsMaximize your device's power and potential to suit your needs and curiositySee exactly how your smartphone's OS is put together (and where the seams are)Book DescriptionWith the mass explosion of Android mobile phones in the world, mobile devices have become an integral part of our everyday lives. Security of Android devices is a broad subject that should be part of our everyday lives to defend against ever-growing smartphone attacks. Everyone, starting with end users all the way up to developers and security professionals should care about android security.Hacking Android is a step-by-step guide that will get you started with Android security. You'll begin your journey at the absolute basics, and then will slowly gear up to the concepts of Android rooting, application security assessments, malware, infecting APK files, and fuzzing. On this journey you'll get to grips with various tools and techniques that can be used in your everyday pentests. You'll gain the skills necessary to perform Android application vulnerability assessment and penetration testing and will create an Android pentesting lab.What you will learnAcquaint yourself with the fundamental building blocks of Android Apps in the right wayPentest Android apps and perform various attacks in the real world using real case studiesTake a look at how your personal data can be stolen by malicious attackersUnderstand the offensive maneuvers that hackers useDiscover how to defend against threatsGet to know the basic concepts of Android rootingSee how developers make mistakes that allow attackers to steal data from phonesGrasp ways to secure your Android apps and devicesFind out how remote attacks are possible on Android devicesAbout the AuthorSrinivasa Rao Kotipalli (@srini0x00) is a security researcher from India. He has extensive hands-on experience in performing web application, infrastructure, and mobile security assessments. He worked as a security consultant at Tata Consultancy Services India for two and a half years and later joined a start-up in Malaysia. He has delivered training sessions on web, infrastructure, and mobile penetration testing for organizations across the world, in countries such as India, Malaysia, Brunei, and Vietnam. Through responsible disclosure programs, he has reported vulnerabilities in many top-notch organizations. He holds a bachelor's degree in information technology and is OSCP certified. He blogs at www.androidpentesting.com and www.infosecinstitute.com.Mohammed A. Imran (@secfigo) is an experienced application security engineer and the founder of null Singapore and null Hyderabad. With more than 6 years of experience in product security and consulting, he spends most of his time on penetration testing, vulnerability assessments, and source code reviews of web and mobile applications. He has helped telecom, banking, and software development houses create and maintain secure SDLC programs. He has also created and delivered training on application security and secure coding practices to students, enterprises, and government organizations. He holds a master's degree in computer science and is actively involved in the information security community and organizes meetups regularly.Table of ContentsSetting Up the LabAndroid RootingFundamental Building Blocks of Android AppsOverview of Attacking Android AppsData Storage and Its SecurityServer-Side AttacksClient-Side Attacks – Static Analysis TechniquesClient-Side Attacks – Dynamic Analysis TechniquesAndroid MalwareAttacks on Android Devices Read more