Devices - Penetration Testing Like a Hacker. - SecNiche Security Labs

Smartphone running the version of Android youselect is active within the analysis environment;now the malicious application can be loaded. Thisis accomplished using Adb and issuing the followingcommand:adb.exe install (Note: Replace sample with the title of the malwaresample you are analyzing.)The following table (Table 1) is a list (not comprehensive)of free tools available to Android malwareanalysis to aid during the examination of a malwaresample.Many in the security field view malware analysis asthe reactive response to an attack, but the oppositeapproach can be taken to help mitigate damages priorto this. Penetration testers can analyze or use malwareanalysis results to understand what an attacker is after,persistence mechanisms, propagation techniques, andadvanced methods being utilized. This intelligenceallows penetration testers the ability to replay realworld attacks and ensure the highest quality results areprovided to the customer.CORY ADAMSCory Adams has been in the informationsecurity eld for over 7 years. He iscurrently a Reverse Engineer with a Fortune100 company. He specializes in malwareanalysis as well as vulnerability analysis.Follow Cory on twitter @SeedyAdams.COMMENTWe are open for suggestions and discussion. Don’thesitate to comment on the articles which you’veread in this issue. Share your opinion on the subjectmatter brought up, back up or confront the pointof view of the author. The best comments will bepublished on our site and in our next issue.05/2011 (5) Septemberhttp://pentestmag.com