App-etite for Destruction: a look into the cookbook of an attacker
summary
Android intent handling mistakes let an unrelated app escalate into system-level actions: decompiling with JADX reveals unsanitized class names that enable any app on the same phone to invoke privileged code (Samsung Flow CVE allowed calling arbitrary numbers, factory resets, install/uninstall). GuardSquare builds AppSweep, an automated MASTG-based scanner that combines static analysis with an instrumented APK for dynamic checks, flags the exact data flow, and integrates into CI (GitHub Actions, Gradle).
AI-written summary · about
chapters (10)
- 0:00Introduction to mobile security
- 3:18Attacker mindset and examples
- 6:28How attackers find vulnerabilities
- 12:03Real-world intent abuse case
- 14:32OWASP security standards explained
- 21:57Limitations of current security measures
- 22:18Introducing AppSweep tool
- 26:56Security lifecycle and tools
- 27:17Demo of AppSweep in action
- 30:30Call to action and Q&A
related talks
33mApp-etite for Destruction: a look into the cookbook of an attacker
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
45mI just hacked your app!
48mSecuring the System: A Deep Dive into Reversing Android Pre-Installed Apps
43mAttacking Android Applications
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
47mAttacking Android Applications
29mSecuring Android Applications - The not so se…