Android AppSec

Install Genymotion and Play Store

smali debugging using Android Studio

Configuring an Android Device to Work With Burp - Install Burp Certificate : HTTPS interception

Install smalidea plugin in Android Studio

Runtime Debugging Native Android Shared library (.so) file using IDA Pro

SSH/SFTP Server Terminal - Powerful SSH server for Android

Login Bypass Cookie Manipulation - hpAndro Vulnerable Application Challenge

HTTP Traffic Interception using BURP Suite Proxy

Old Backup Files - hpAndro Vulnerable Application Challenge

Hardcoded Secret in Native Library (.so files) - hpAndro Vulnerable Application Challenge

REST API HTTP Methods - hpAndro Vulnerable Application Challenge

Install Genymotion and Play Store

Remote File Inclusion [RFI] - hpAndro Vulnerable Application Challenge

JavaScript Info Leak - hpAndro Vulnerable Application Challenge

GPS Location Spoofing - hpAndro Vulnerable Application Challenge

Identifying and Breaking RSA Encryption Logic using Profile or Debug APK (Android Studio) - RSA flag

Android Studio Emulator (AVD) Rooting with Magisk using rootAVD

Install JRE (for apktool) and ADB (sdk-platform-tools)

#Medusa

Verifying genymotion plugin with Android Studio

Encoding & Hashing - hpAndro Vulnerable Application Challenge

HTML5 Controls (Local Storage) - hpAndro Vulnerable Application Challenge

Install genymotion plugin in Android Studio

Install Xposed Framework in Genymotion

Reverse Engineering Android APK file using apktool

Ninjutsu Android Penetration Testing Environment - MEmu based emulator

XML External Entity [XXE] - hpAndro Vulnerable Application Challenge

RPATH - run-time search path hard-coded in native library - hpAndro Vulnerable Application Challenge

OTP Bruteforce - hpAndro Vulnerable Application Challenge

User Password Enumeration - hpAndro Vulnerable Application Challenge

JWT Misconfiguration - hpAndro Vulnerable Application Challenge

XPath Injection - hpAndro Vulnerable Application Challenge

Configuring an Android Device to Work With Burp - Intercept HTTP Traffic

RIA Cross Domain Policy - hpAndro Vulnerable Application Challenge

JSON to XXE Blind - hpAndro Vulnerable Application Challenge

BurpSuite - Intercept HTTPS request

How to Install and Use MobSF(Mobile Security Framework) on Windows 10 via Docker in 5 Min ?

Unrestricted File Upload - hpAndro Vulnerable Application Challenge

Checking Memory for Sensitive Data (Memory Flag) - hpAndro Vulnerable Application Challenge

S3 Bucket Misconfiguration - hpAndro Vulnerable Application Challenge

Server Side Template Injection [SSTI] - hpAndro Vulnerable Application Challenge

Server Side Request Forgery [SSRF] - hpAndro Vulnerable Application Challenge

Default Credential - hpAndro Vulnerable Application Challenge

SSAID or ANDROID_ID validation Bypass using Dalvik bytecode Patch - hpAndro Vulnerable Application

Decompile - Modify - Recompile - Sign (APK)

Review Comment and Meta Data - hpAndro Vulnerable Application Challenge

Server Fingerprinting - hpAndro Vulnerable Application Challenge

FЯIDA - Dynamic Instrumentation Toolkit - Setting up your Android device

HTTPS Traffic Interception using BURP Suite Proxy