Module 1 - Android Application Penetration Testing - INTRODUCTION
Module 2- Android Security Model
Modul 3: App Development Basics
Security Assessments of Android Apps – OWASP TOP 10
-
Introduction (2:52)
-
M2 – Insecure Data Storage - SHARED PREFERENCES (7:17)
-
M2 – Insecure Data Storage - SHARED PREFERENCES -- Look at Code (3:39)
-
M2 – Insecure Data Storage - SHARED PREFERENCES -SQlite Databases (7:41)
-
M2 – Insecure Data Storage - SQlite Databases -- Look at Code (3:26)
-
M3 – Insufficient Transport layer protection --- Introduction and HTTP traffic interception (9:41)
-
M3 – Insufficient Transport layer protection --- Intercepting HTTPS traffic (7:20)
-
M3 – Insufficient Transport layer protection --- The Coffee shop attack (10:13)
-
M3 – Insufficient Transport layer protection ---Passive analysis with tcpdump & Wireshark (7:38)
-
M4 – Unintended Data Leakage -- Reading the clipboard (7:16)
-
M4 – Unintended Data Leakage -- Reading the clipboard - Look at Code (1:45)
-
M4 – Unintended Data Leakage --Logging (5:09)
-
M4 – Unintended Data Leakage --Logging -- Look at Code (2:07)
-
M5 –Poor Authorization and Authentication (3:42)
-
M6 – Broken Cryptography (8:15)
-
M7 – Client Side Attack-- SQL Injection at Client Side (3:29)
-
M7 - SQL INJECTION -- LOOK AT CODE (2:58)
-
M7 - frame injection in webviews (2:18)
-
M7 - frame injection in webviews -- Look at Code (2:44)
-
M8 – Security Decisions via untrusted inputs -- Intent Spoofing (5:08)
-
M9 – Improper Session Handling (4:05)
-
M10 – Lack of binary protection -- Introduction (2:16)
-
M10 - Reversing android apps with APKTOOL (3:38)
-
M10 - Reversing android apps with dex2jar & JD-GUI (3:23)
-
M10 - Finding Content Provider URIs using APKTOOL. (3:20)
Module 1: Getting Started
Module 2 - iOS Security Model
Module 3 - Setting up an iOS PenTesting Lab
Module 4 - Penetration Testing iOS Apps -- Insecure Local Data Storage
Module 5 - Penetration Testing iOS Apps -- Unintended Data Leakage
Module 6 - Penetration Testing iOS Apps -- Client Side Injection
Module 7 - Traffic Analysis
Module 8 - Runtime Analysis
-
Dumping class information of preinstalled apps (6:17)
-
Dumping class information of apps installed from App Store (8:49)
-
Cycript Basics (13:48)
-
Runtime Code Injection using Cycript (5:11)
-
Accessing and modifying variables using Cycript (6:34)
-
Exploiting authentication using Cycript (6:34)
-
Method Swizzling using Cycript (5:47)
-
Bypassing Jailbreak detection using Cycript (9:42)
-
Method Swizzling using Snoop-it (12:04)
-
App Monitering Using SNOOP-IT (3:27)
-
Runtime analysis with GDB (8:45)
-
Runtime Analysis with SNOOP-IT (12:04)
Module 9- Network Attacks
Module 10: Reverse Engineering
M3 – Insufficient Transport layer protection --- The Coffee shop attack
Back to Home | My Courses
Lesson content locked
If you're already enrolled, you'll need to login.
Enroll in Course to Unlock