How to Steal a JWT and How to Protect From It
summary
Shows an end‑to‑end exploit: extract a Firebase JWT from the app file com.google.firebase.auth.api.store on a rooted/emulator or repackaged APK, use APKTool to inject a small payload that reads shared prefs and exfiltrates tokens to a C2 server, grab the Firebase API key from app strings, then call the backend and get 200 OK — short JWT lifetimes don’t stop this. Defenses shown are runtime checks and attestation using FreeRASP (used in 1,000+ apps) and a server‑side cryptogram AppiCrypt that blocks requests without a valid proof.
AI-written summary · about
chapters (5)
- 0:00Introduction and background
- 3:46How to steal a JWT
- 19:31How to protect from JWT theft
- 36:36Backend protection with integrity proofs
- 40:50Conclusion and Q&A
related talks
33mHacking and protection of Mobile Apps and backend APIs
46mA More Secure World for Android Apps
36mI just hacked your app!
45mI just hacked your app!
32mThree ways to use AI on Android: The Good, the Bad and the Ugly
53mA More Secure World for Android Apps
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
45mI just hacked your app!