"The significance of mobile exploit applications"
summary
Defines exploit applications target other apps rather than the OS, arguing Android/iOS sandboxing and per-app UIDs prevent systemic compromise; jailbreaking/rooting is becoming harder as vendors tighten defenses. Demonstrates concrete vulnerabilities: insecure external storage, path traversal, and exported activities that enable logical DoS by repeatedly triggering a kill activity; shows a content-provider snippet with an enabled authority. Recommends fixes: avoid exported=true for components, remove world-readable logs, obfuscate code, and implement SSL pinning.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:18Background
- 0:56What are exploit applications
- 1:30Is the operating system vulnerable
- 3:12Jail breaking and routing
- 4:28Vulnerabilities
related talks
21mWhen Attackers Go Mobile-First: What Developers Need to Know
43mSecurity in Android Applications
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
45mTen Secrets to Secure Mobile Applications
40mBest practices for shielding mobile apps from emerging threats
29mSecuring Android Applications - The not so se…
32mHack Your Own App: Getting Started with Mobile Penetration Testing
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security