Skip to main content
CPEBuddy
Three Ways to Hack Mobile Apps

Three Ways to Hack Mobile Apps

Source: YouTube · John Hammond · published Oct 7, 2024 · 43:43

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

This video demonstrates mobile app security vulnerabilities by showing three different attack scenarios to extract secrets from an Android app 0:00.

Key Takeaways:
• Static analysis using JADX decompiler reveals Java source code from APK files, allowing attackers to examine code logic 2:24
• Recreating the app in Android Studio with extracted code lets attackers modify behavior to reveal secrets 10:03
• Dynamic analysis with Frida enables hooking into function calls during runtime to intercept data 14:25
• SMALI code modification allows direct bytecode manipulation to expose sensitive information 28:13
• Protected apps using security solutions implement obfuscation and tamper detection that make attacks significantly more difficult 35:30

The video concludes by showing how proper app protection can defend against these hacking techniques 39:14.

Sources:

  • 0:00 Introduction to mobile app hacking and attack scenarios
  • 2:24 Using JADX decompiler for static analysis
  • 10:03 Modifying app behavior in Android Studio
  • 14:25 Using Frida for dynamic analysis
  • 28:13 SMALI code manipulation
  • 35:30 GuardSquare protection features
  • 39:14 Conclusion on app protection

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

mobile app hacking in mobile application security is an awesome field and piece within the cyber security industry but there is a lot to learn and it can get a little bit complex so what I'd like to do is walk through one simple and small example little demo and Showcase with an Android application written in Java and we'll walk through three different attack scenarios where we could maybe extract and uncover some Secrets sensitive information and data Maybe API key passwords and credentials and actually tamper with the application maybe modify some of its behavior and dig into how we can beat up and do some damage against a mobile app this video is sponsored by guard square and I'll tell you more about that later now before we actually dig into the code I'd like to show you this app in ac…