The Nightmare Behind The Cross Platform Mobile Apps Dream
summary
Analysis of PhoneGap/Cordova, Unity, Corona, Adobe AIR and Titanium shows trivial extraction or bypasses that expose user data and allow runtime fraud. Specific findings: Cordova intent URL RCE and whitelist bypass lets a malicious intent load JS from a file and steal app data; Adobe AIR "encrypted" local storage = base64 in shared prefs plus ADB backup readable so secrets leak; Titanium ships a nonvalidating SSL socket factory enabling easy MITM. A Python-based extractor for these frameworks is being released.
AI-written summary · about
chapters (9)
- 0:00Introduction and agenda
- 1:49Mobile framework background
- 4:44Survey of popular frameworks
- 13:01Static analysis techniques
- 21:56Dynamic analysis and attacks
- 25:16Cordova security vulnerabilities
- 30:34Adobe Air and Titanium quirks
- 34:42Conclusions and next steps
- 41:38Q&A session
related talks
54mPanel 6: Privileged access
44mMobile Penetration Testing Hybrid
54mUnwrapping the Truth: Analysis of Mobile Application Wrapping Solutions
33mHacking and protection of Mobile Apps and backend APIs
49mContain Yourself: Building Secure Containers for Mobile Devices
58mUncovering OWASP’s Mobile Risks in iOS Apps
49mHow to Hack Your Own Mobile App
45mTen Secrets to Secure Mobile Applications