Hacking Android

Explore every nook and cranny of the Android OS to modify your device and guard it against security threats

About This Book

• This guide will help you understand and counteract against offensive security threats to your applications
• Get the ultimate step-by-step guide to maximizing your device's power and potential to suit your needs and curiosity
• See exactly how your smartphone's OS is put together (and where the seams are)

Who This Book Is For

This book is for anyone who wants to learn about Android security. Software developers, QA professionals, and beginner- to intermediate-level security professionals will find this book helpful. Basic knowledge of Android programming would be a plus.

What You Will Learn

• Acquaint yourself with the fundamental building blocks of Android Apps in the right way
• Pentest Android apps and perform various attacks in the real world using real case studies
• Take a look at how your personal data can be stolen by malicious attackers
• Understand the offensive manoeuvres that hackers use
• Discover how to defend against threats
• Get to know the basic concepts of Android rooting
• See how developers make mistakes that allow attackers to steal data from phones
• Grasp ways to secure your Android apps and devices
• Find out how remote attacks are possible on Android devices

In Detail

With the mass explosion of Android mobile phones in the world, mobile devices have become an integral part of our everyday lives. Security of Android devices is a broad subject that should be part of our everyday lives to defend against ever-growing smartphone attacks. Everyone, starting with end users all the way up to developers and security professionals should care about android security.

Hacking Android is a step-by-step guide that will get you started with Android security. You'll begin your journey at the absolute basics, then will slowly gear up to the concepts of Android rooting, application security assessments, malware, infecting APK files, and fuzzing. On this journey, you'll get to grips with various tools and techniques that can be used in your everyday pentests. You'll gain the skills necessary to perform Android application vulnerability assessment and penetration testing and will create an Android pentesting lab.

Srinivasa Rao Kotipalli (@srini0x00) is a security researcher from India. Srinivas has extensive hands-on experience performing web application, infrastructure, and mobile security assessments. Initially, he worked as a Security Consultant at Tata Consultancy Services India for 2 and a half years and later joined a start-up in Malaysia. He has delivered training sessions on web, infrastructure, and mobile penetration testing for organisations across the world, including India, Malaysia, Brunei, and Vietnam. Through the responsible disclosure programs, he reported vulnerabilities in many top notch organisations. He holds a Bachelor's degree in Information Technology and he is an OSCP. Mohammed A. Imran (@secfigo) is an experienced application security engineer, and the founder of null Singapore and null Hyderabad. With more than 6 years of experience in product security and consulting, he spends most of his time on penetration testing, vulnerability assessments, and source code reviews of web and mobile applications. He has helped telecom, banking, and software development houses to create and maintain secure SDLC programs. He has also created and delivered training to students, enterprises, and government organizations on application security and secure coding practices. He holds a Master's degree in computer science. He is actively involved in information security community and organizes meetups regularly.