Learning Pentesting for Android Devices

¡ Packt Publishing Ltd
ā§Š.⧝
⧧⧍ āϟāĻž āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻž
āχāĻŦ⧁āĻ•
154
āĻĒ⧃āĻˇā§āĻ āĻž
āĻŽā§‚āĻ˛ā§āϝāĻžāĻ‚āĻ•āύ āφ⧰⧁ āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻž āϏāĻ¤ā§āϝāĻžāĻĒāύ āϕ⧰āĻž āĻšā§‹ā§ąāĻž āύāĻžāχ  āĻ…āϧāĻŋāĻ• āϜāĻžāύāĻ•

āĻāχ āχāĻŦ⧁āĻ•āĻ–āύ⧰ āĻŦāĻŋāĻˇā§Ÿā§‡

This is an easy-to-follow guide, full of hands-on and real-world examples of applications. Each of the vulnerabilities discussed in the book is accompanied with the practical approach to the vulnerability, and the underlying security issue. This book is intended for all those who are looking to get started in Android security or Android application penetration testing. You don’t need to be an Android developer to learn from this book, but it is highly recommended that developers have some experience in order to learn how to create secure applications for Android.

āĻŽā§‚āĻ˛ā§āϝāĻžāĻ‚āĻ•āύ āφ⧰⧁ āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻžāϏāĻŽā§‚āĻš

ā§Š.⧝
⧧⧍ āϟāĻž āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻž

āϞāĻŋāĻ–āϕ⧰ āĻŦāĻŋāώāϝāĻŧ⧇

Aditya Gupta is the founder and trainer of Attify, a mobile security firm, and leading mobile security expert and evangelist. Apart from being the lead developer and co-creator of Android framework for exploitation, he has done a lot of in-depth research on the security of mobile devices, including Android, iOS, and Blackberry, as well as BYOD Enterprise Security. He has also discovered serious web application security flaws in websites such as Google, Facebook, PayPal, Apple, Microsoft, Adobe, Skype, and many more. In his previous work at Rediff.com, his main responsibilities were to look after web application security and lead security automation. He also developed several internal security tools for the organization to handle the security issues. In his work with XYSEC, he was committed to perform VAPT and mobile security analysis. He has also worked with various organizations and private clients in India, as well as providing them with training and services on mobile security and exploitation, Exploit Development, and advanced web application hacking. He is also a member of Null—an open security community in India, and an active member and contributor to the regular meetups and Humla sessions at the Bangalore and Mumbai Chapter. He also gives talks and trainings at various security conferences from time to time, such as BlackHat, Syscan, Toorcon, PhDays, OWASP AppSec, ClubHack, Nullcon, and ISACA. Right now he provides application auditing services and training. He can be contacted at [email protected] or @adi1391 on Twitter.

āĻāχ āχāĻŦ⧁āĻ•āĻ–āύāĻ• āĻŽā§‚āĻ˛ā§āϝāĻžāĻ‚āĻ•āύ āϕ⧰āĻ•

āφāĻŽāĻžāĻ• āφāĻĒā§‹āύāĻžā§° āĻŽāϤāĻžāĻŽāϤ āϜāύāĻžāĻ“āĻ•āĨ¤

āĻĒāĻĸāĻŧāĻžā§° āύāĻŋāĻ°ā§āĻĻ⧇āĻļāĻžā§ąāϞ⧀

āĻ¸ā§āĻŽāĻžā§°ā§āϟāĻĢ’āύ āφ⧰⧁ āĻŸā§‡āĻŦāϞ⧇āϟ
Android āφ⧰⧁ iPad/iPhoneā§° āĻŦāĻžāĻŦ⧇ Google Play Books āĻāĻĒāĻŸā§‹ āχāύāĻˇā§āϟāϞ āϕ⧰āĻ•āĨ¤ āχ āĻ¸ā§āĻŦāϝāĻŧāĻ‚āĻ•ā§āϰāĻŋāϝāĻŧāĻ­āĻžā§ąā§‡ āφāĻĒā§‹āύāĻžā§° āĻāĻ•āĻžāωāĻŖā§āϟ⧰ āϏ⧈āϤ⧇ āĻ›āĻŋāĻ‚āĻ• āĻšāϝāĻŧ āφ⧰⧁ āφāĻĒ⧁āύāĻŋ āϝ'āϤ⧇ āύāĻžāĻĨāĻžāĻ•āĻ• āϤ'āϤ⧇āχ āϕ⧋āύ⧋ āĻ…āĻĄāĻŋāĻ…'āĻŦ⧁āĻ• āĻ…āύāϞāĻžāχāύ āĻŦāĻž āĻ…āĻĢāϞāĻžāχāύāϤ āĻļ⧁āύāĻŋāĻŦāϞ⧈ āϏ⧁āĻŦāĻŋāϧāĻž āĻĻāĻŋāϝāĻŧ⧇āĨ¤
āϞ⧇āĻĒāϟāĻĒ āφ⧰⧁ āĻ•āĻŽā§āĻĒāĻŋāωāϟāĻžā§°
āφāĻĒ⧁āύāĻŋ āĻ•āĻŽā§āĻĒāĻŋāωāϟāĻžā§°ā§° ā§ąā§‡āĻŦ āĻŦā§āϰāĻžāωāϜāĻžā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻŋ Google PlayāϤ āĻ•āĻŋāύāĻž āĻ…āĻĄāĻŋāĻ…'āĻŦ⧁āĻ•āϏāĻŽā§‚āĻš āĻļ⧁āύāĻŋāĻŦ āĻĒāĻžā§°ā§‡āĨ¤
āχ-ā§°ā§€āĻĄāĻžā§° āφ⧰⧁ āĻ…āĻ¨ā§āϝ āĻĄāĻŋāĻ­āĻžāχāϚ
Kobo eReadersā§° āĻĻ⧰⧇ āχ-āϚāĻŋ⧟āĻžāρāĻšā§€ā§° āĻĄāĻŋāĻ­āĻžāχāϚāϏāĻŽā§‚āĻšāϤ āĻĒā§āĻŋāĻŦāϞ⧈, āφāĻĒ⧁āύāĻŋ āĻāϟāĻž āĻĢāĻžāχāϞ āĻĄāĻžāωāύāĻ˛â€™āĻĄ āϕ⧰āĻŋ āϏ⧇āχāĻŸā§‹ āφāĻĒā§‹āύāĻžā§° āĻĄāĻŋāĻ­āĻžāχāϚāϞ⧈ āĻ¸ā§āĻĨāĻžāύāĻžāĻ¨ā§āϤ⧰āĻŖ āϕ⧰āĻŋāĻŦ āϞāĻžāĻ—āĻŋāĻŦāĨ¤ āϏāĻŽā§°ā§āĻĨāĻŋāϤ āχ-ā§°āĻŋāĻĄāĻžā§°āϞ⧈ āĻĢāĻžāχāϞāĻŸā§‹ āϕ⧇āύ⧇āĻ•ā§ˆ āĻ¸ā§āĻĨāĻžāύāĻžāĻ¨ā§āϤ⧰ āϕ⧰āĻŋāĻŦ āϜāĻžāύāĻŋāĻŦāϞ⧈ āϏāĻšāĻžāϝāĻŧ āϕ⧇āĻ¨ā§āĻĻā§ā§°āϤ āĻĨāĻ•āĻž āϏāĻŦāĻŋāĻļ⧇āώ āύāĻŋā§°ā§āĻĻ⧇āĻļāĻžā§ąāϞ⧀ āϚāĻžāĻ“āĻ•āĨ¤