Automated Static And Dynamic Security Analysis of Mobile Apps
summary
Shows how to test mobile app security by automating both static and dynamic analysis. Demonstrations use MobSF and Burp Suite for static checks and show runtime bypass techniques such as root-detection bypass and SSL pinning bypass, plus exploration of various other mobile vulnerabilities.
AI-written summary · about
chapters (7)
- 0:00Start
- 3:41Bypassing techniques
- 7:15Using Objection Framework to Bypass SSL Pinning
- 40:14Tools and Setup
- 43:45Root Detection
- 46:21Requirements
- 55:25Automating Static Analysis using MobSF
related talks
29mFixing Mobile AppSec
32mHack Your Own App: Getting Started with Mobile Penetration Testing
46mMobile AppSec from an attacker's perspective
33mBest Practices for Mobile App Security Testing
39mMobile App Traffic: Analysis and Modification
20mMobile Application Security (MAS)
37mHow to find vulnerabilities in a mobile app
45mFast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide