~/talk

Topics of Interest: Unlocking Mobile App Security Secrets

Talkat OWASP 20th Anniversary 2021 · on Friday, 2021-09-24· [security]
slides:none on file

Demo shows walking through walls in Among Us by invoking a revive/die function and using a memory scanner to change Tamagotchi diamonds, claiming the scanner works on 400+ games; payments get bypassed by calling onTransactionSucceed directly from an attached debugger. The talk lays out four concrete defenses — environment integrity, application integrity, code integrity, obfuscation — and gives do‑it‑yourself checks (file artifacts, bundle/signature checks, opcode hashes, obfuscation and asset encryption) and shows the exploits actually working in live demos.

AI-written summary · about

  1. 0:00Intro
  2. 1:27Don't let hackers
  3. 1:55Protect you app by following 4 simple guidelines
  4. 5:47Getting free diamonds
  5. 6:36Bypassing payments
  6. 9:07Environment Integrity
  7. 10:47How to protect your app - DIY
  8. 12:12Install a paid app for free!
  9. 13:18How come these apps are available for free?
  10. 14:55Modify game's resources - how?
  11. 15:55Application Integrity
  12. 19:00Unlock premium content
  13. 19:51Bypassing the licence check
  14. 21:30Code integrity
  15. 24:14Walking through walls - symbol obfuscation
  16. 28:33Auto-updating cheats
  17. 30:01Protect your app with obfuscation - DIY
  18. 30:46Each protection component matters!
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.