Mobile Security

Mobile security is a constant issue among many enterprises. As companies continue to go digital and offer online and mobile platforms to their consumers, the rate of mobile security threats multiplies by the day. Having a mobile application is another means of ensuring that the product and services your company…

Just about everybody in the world uses a smartphone today, and just about everybody has way too much personal information or data on those smartphones. We use them for storing photos, accessing bank accounts, email, online shopping, and many different applications. …

Before Android 13, when an app registered an exported component in its manifest and added an <intent-filter>, the component could be started by any explicit intent — even those that do not match the intent filter. In some circumstances this can allow other apps to trigger internal-only functionality. This behavior…

Malware in the various forms of spyware, adware, trojans, and worms are exceedingly rampant in both android and iOS devices. Months ago, I wrote about the gravity of mobile viruses and their proliferation in today’s world. We concluded that mobile devices are more susceptible to attacks mainly because of widespread…

Introduction What is Secure Software Development Secure Development Life Cycle (SDLC) Proactive Controls OWASP — Top 10 Mobile Risks — Final List 2016 References What Does Software Security Mean? Software security is an idea implemented to protect software against malicious attacks and other hacker risks so that the software continues to function correctly under such potential…

The Mobile Hacking CheatSheet is an attempt to summarise a few interesting basics info regarding tools and commands needed to assess the security of Android and iOS mobile applications. Main Steps Review the codebase Run the app Dynamic instrumentation Analyze network communications APK Structure META-INF: Files related to the signature scheme (v1 scheme only) …

Be sure to read Mobile Security Training Module 2 before reading this section. Because in this section, I will explain Android Architecture in detail. Let’s Start! Android Runtime:

👋 Hi and welcome to the second post in this series where we deep-dive into Android Security. This series focuses on the Top 10 Mobile security threats as determined by The Open Web Application Security Project (OWASP) Foundation, the leading application security community in our field. Before checking this post…

Few days ago I came across an interesting case of vulnerability posted at the AndroidInfoSec’s facebook page. Since there are not many references on the specific subject I decided to take a short break from my heap exploitation series and cover this topic in a blog post. Before we move…