Android Malware - Realm of Mobile Infection - SecNiche Security Labs

More documents

Recommendations

Info

• Emulator<strong>Android</strong>─ “http-proxy” flag when running AVD works only with browser.● Hit or miss! ─ Tsocks is a better option on Linux boxes─ For SSL MiTM add proxy cert to /system/etc/security/cacerts.bks• Device─ Rooted with Cyanogen ROM (iptables support)─ Autoproxy tool adds GUI to iptables─ Same solution as emulator for SSL MiTMSANS AppSec Summit 2012 - Panel 10
Blackberry• Device─ No native proxy support. ─ WiFi MiTM with proxy support on Linux─ Will not connect to Ad-hoc AP.─ Easiest solution: use Pineapple WiFi router ()─ Apps provide a dialog box to accept bad SSL certs. So SSL MiTM forpentesting is easier.SANS AppSec Summit 2012 - Panel 11
Page 1: SANS PanelBust a Cap in a Mobile Ap
Page 5 and 6: Introduction to Android Malware•
Page 7 and 8: Mobile App PentestingHow to proxy t
Page 9: iOS• Emulator─ Works on HTTP Pr
Page 13 and 14: Next Gen Attacks: Piggybacking onst
Page 15: QuestionsSANS AppSec Summit 2012 -

Android Malware - Realm of Mobile Infection - SecNiche Security Labs

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?