Android App Hacking – Black Belt Edition

Becoming the lead expert in android app security

Created by: Roman Stuehler
Me

What Will I Learn?

• Deep understanding of the android app structure
• How to exploit Activities, BroadcastReceiver and ContentProvider (SQL injection & Path Traversal)
• Bypassing Rooting Detection (SMALI and FRIDA)
• Bypassing Certificate Pinning (SMALI and FRIDA)
• Performing a man-in-the-middle attack
• Analyzing-/ Manipulating the network traffic of a mobile app
• Creating call- and flow graphs to reverse engineer strong obfuscated apps
• Manipulating Java and C/C++ methods (FRIDA & SMALI)
• Reading- / Writing SMALI code
• Injecting own (custom) code into existing applications
• Deep understanding of the android permission model
• Modifying games (infinite lives, high score, invisble, invincible) - Writing a trainer
• Analzying bluetooth low energy connections
• Dealing with different encryption types (e.g. AES)
• Deep- / Web- / App-Links (Bug Bounty)
• Reversing native libraries with Ghidra
• Debugging Java code
• Debugging SMALI code (live - with interpreter)
• Webvies & JavaScriptInterfaces
• XSS / SQL Injection Exploitation

Requirements

• Android knowledge is not required (This course teaches everything)
• No real smartphone required
• Laptop / PC

Target audience

• Security Analyst / Ethical Hacker
• Android App Developer
• Bug Bounty Hunter
• Everyone who likes to manipulate android apps / games 🙂