Android: He protec, but he also attac
summary
Walks assembler-level Android internals and demonstrates a working native injector that uses ptrace/dlopen/dlsym plus offset math to bypass ASLR, showing how method hooking rewrites call sites and steals return values. Uses live demos with Frida and Xposed to hook login checks and exfiltrate credentials, and verifies SafetyNet, installer, debug, emulator, signature and root checks as mitigations. Cites a 443‑person survey about decade‑old defenses and claims “300 of 300” apps contain malicious code to motivate needing layered, scattered checks across Java and native.
AI-written summary · about
chapters (20)
- 0:00Welcome
- 1:11Who should listen
- 2:18Mobile app security issues
- 3:46Not discussing
- 4:32Talk plan and basic checks
- 5:17Protection from casual users
- 6:22Emulator check
- 7:46Installation source check
- 8:51App signature check
- 11:19Google Play Integrity API
- 13:48Protection from rooted users
- 14:53Frida method and how it works
- 19:47ASLR and bypassing protection
- 23:43Ptrace injection
- 29:01Frida practical demo
- 33:40Frida and Xposed protection
- 36:52Placing checks in code
- 38:19Protection evaluation and costs
- 40:08Harsh protection methods
- 42:37Q&A
related talks
01h 07mHow to attack (and secure) an Android app: an introduction
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
47mAttacking Android Applications
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
43mAttacking Android Applications
45mI just hacked your app!
38mAdvanced Techniques for Protecting Android Apps
28mSecure Development whit Android