How to find vulnerabilities in a mobile app
summary
Shows how a manual QA tester can find vulnerabilities in mobile apps by checking for top OWASP risks; demonstrates hands-on testing techniques using Santoku Linux and Genymotion emulators to detect common security holes during development.
AI-written summary · about
chapters (13)
- 0:00Mobile app vulnerabilities
- 3:00Top 10 vulnerabilities
- 7:21Reverse engineering apps
- 8:27Platform misuse and logging
- 12:06Secret storage flaws
- 15:02Weak encryption and interception
- 16:32Poor cryptography and brute-forcing
- 17:34Authorization bypass flaws
- 19:22Bad code and overflows
- 20:26Code tampering
- 22:24Hardcoded keys
- 24:21Mobile analysis tools
- 26:13Summary and Q&A
related talks
33mBest Practices for Mobile App Security Testing
01h 13mAutomated Static And Dynamic Security Analysis of Mobile Apps
32mHack Your Own App: Getting Started with Mobile Penetration Testing
37mMobile DevSecOps: 5 Tips from Building Mobile Apps Used by Millions
29mFixing Mobile AppSec
37mSecuring our apps: anticipate threats, protect users
54mAnalyzing the Security of Mobile Apps for Automobiles
58mHackers vs Developers: Mobile Applications