Learning Pentesting for Android Devices
'Learning Pentesting for Android Devices' by Aditya Gupta is a technical guide to mobile device security, application penetration testing, and digital forensics on the Android platform. The text details the mobile threat landscape, internal security architectures, and offensive testing methodologies aligned with the OWASP Mobile Application Security Testing Guide (MASTG).
Key topics include APK decompilation, static code analysis with JADX and Apktool, dynamic runtime instrumentation with Frida, SSL pinning bypass, insecure data storage, inter-process communication (IPC) vulnerabilities, and mobile evidence recovery. Detailed workflows guide readers through auditing mobile apps.
Essential for mobile app developers, penetration testers, and digital forensic investigators specializing in mobile ecosystem security.
Key topics include APK decompilation, static code analysis with JADX and Apktool, dynamic runtime instrumentation with Frida, SSL pinning bypass, insecure data storage, inter-process communication (IPC) vulnerabilities, and mobile evidence recovery. Detailed workflows guide readers through auditing mobile apps.
Essential for mobile app developers, penetration testers, and digital forensic investigators specializing in mobile ecosystem security.
Contents at a Glance
Chapter 1: Android Security Architecture and Linux Permission Model
Chapter 2: Application Sandboxing, IPC, and Intent Security
Chapter 3: Static Analysis: Decompiling APKs with JADX, Apktool, and Baksmali
Chapter 4: Dynamic Analysis: Hooking and Instrumentation with Frida and Xposed
Chapter 5: Attacking Insecure Data Storage, Keystore, and Content Providers
Chapter 6: Network Security: SSL Pinning Bypass and Traffic Interception
Chapter 7: Reverse Engineering Native Libraries (.so) with Ghidra
Chapter 8: Automated Android Vulnerability Assessment with MobSF
Index & Further Reading
Chapter 1: Android Security Architecture and Linux Permission Model
Chapter 2: Application Sandboxing, IPC, and Intent Security
Chapter 3: Static Analysis: Decompiling APKs with JADX, Apktool, and Baksmali
Chapter 4: Dynamic Analysis: Hooking and Instrumentation with Frida and Xposed
Chapter 5: Attacking Insecure Data Storage, Keystore, and Content Providers
Chapter 6: Network Security: SSL Pinning Bypass and Traffic Interception
Chapter 7: Reverse Engineering Native Libraries (.so) with Ghidra
Chapter 8: Automated Android Vulnerability Assessment with MobSF
Index & Further Reading
