CoursAndroid3

• Third session of Android development class, focused on security/re.
• Dates:
  • 13.02.2014 at 19h until ~23h
  • 27.02.2014 at 19h until ~23h
  • Pick a date: http://framadate.org/studs.php?sondage=bow5dl3e8sptffo6
• Events:
  • 1st session (static) https://fixme.ch/civicrm/event/info?reset=1&id=100 (Registration is mandatory!)
  • 2nd session (dynamic) https://fixme.ch/civicrm/event/info?reset=1&id=101
• Course material
  • VirtualMachine: https://ctrl.fixme.ch/android-reverse-fixme.tgz
  • Slides: https://github.com/rorist/android-reverse

• INTRO: Android stack, APK structure
• Static: Decompile, modify, repackage with apktool
• Dynamic: Modify library calls at run time with Android DDI
• ...

Resources

• VM for Android RE: https://redmine.honeynet.org/projects/are/wiki
• Android dis/assembler: https://code.google.com/p/smali/
• APK analysis: https://github.com/honeynet/apkinspector/
• Android vulnerable apps: https://github.com/jackMannino/OWASP-GoatDroid-Project
• Android security resources: https://github.com/ashishb/android-security-awesome

• User:Rorist

• dgellow
• User:noskill
• User:Philoux

• CoursAndroid1
• CoursAndroid2