Android App Penetration Testing 101

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) - Wild West Hackin' Fest: wildwesthackinfest.com/
From Wild West Hackin' Fest 2018 in Deadwood, SD.
Presenters: Joff Thyer and Derek Banks
Description: Joff has over 20 years of experience in the IT industry as an enterprise network architect, network security defender, information security consultant, software developer and penetration tester. He has extensive experience covering intrusion prevention/detection systems, infrastructure defense, vulnerability analysis, defense bypass, source code analysis, and exploit research with related software development skills in multiple programming languages. Joff is a certified SANS instructor for SEC573, has mentored SANS SEC503, and also taught mastering packet analysis for SANS. He is also a co-host on the Security Weekly podcast.
Derek has over 20 years of experience in the IT industry as a systems administrator for multiple operating system platforms, and monitoring and defending those systems from potential intruders. He has worked in the aerospace, defense, banking, manufacturing, and software development industries. Derek has experience with creating custom host and network based monitoring solution
Wild West Hackin' Fest Socials
Twitter: / wwhackinfest
LinkedIn: / wild-west-hackin-fest
Wild West Hackin' Fest Shirts & Hoodies
spearphish-general-store.mysh...
Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: www.backdoorsandbreaches.com/
Play B&B Online: play.backdoorsandbreaches.com/
Antisyphon Training
Pay What You Can: www.antisyphontraining.com/pa...
Live Training: www.antisyphontraining.com/co...
On Demand Training: www.antisyphontraining.com/on...
Educational Infosec Content
Wild West Hackin' Fest TH-cam: / wildwesthackinfest
Active Countermeasures TH-cam: / activecountermeasures
Antisyphon Training TH-cam: / antisyphontraining
#infosec #wwhf

[@xscorp382]

This is the first conference that I have seen till the end. Thank you for such an awesome presentation. :-)

[@seanjackson1671]

I love TH-cam because you can learn anything here. And that is because we are free to express, explore, an Exchange iideals and knowledge.

[@ao5468]

Thanks. I am using Genymotion. It is actually possible to include Arm translation in the Genymotion.

[@BinaryByte]

Awesome.Very nicely explained.

[@taherboujrida8110]

Thank you guys for the fantastic presentation... keep it up

[@janithmalinga5765]

Nicely explained, Thanks

[@taherboujrida8110]

awesome presentation and style..guys...thanks...

[@neerajk_10]

he is infact a fun guy!

[@ca7986]

Amazing guy

[@muhammadadibdzulfikar9584]

Thankyou

[@yazdipour]

Skip till 25:30

[@stackspace]

actual hero

[@hectorm9764]

Buenas, alguien me puede recomendar por favor un buen curso o certificación de mobile hacking para aplicaciones ios y android?, gracias!!!

[@zoomanimation420]

🧡🧡

[@hanoi2216]

Please share slide PPT ???

[@domaincontroller]

06:30 it takes a significant amount of set up to get that right 07:21 must have tools 08:18 AXMLPrinter2.jar, which is a java app to extract an XML manifest that's in binary form in a AKP file 08:37 drozer, look at android internals, sort of metaexploit equivalent for android 08:56 devices, sometimes the emulators have issues, otherwise ungodly slow 09:50 genymotion 12:34 ADB 14:46 Android package file is just a ZIP package of runtime stuff /////////////////////////////16:43 android internals, intent, IPC 18:21 broadcast listener 20:10 adb logcat 23:27 smali m.th-cam.com/video/QfX5eUfvZas/w-d-xo.html is essentially assembli code for android