Skip to content

CSbyGB/Workshops-Android-Application-Pentest

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Workshops Android Application Pentest

Material for workshops on Android Application Pentest

My Pentips about Android Application pentest

My talks about Android Application Pentest

My Android Application Pentest playlist on Youtube

Installs & setups for workshop

Install Android Studio

decompress the archive

tar -zxvf android-studio-2023.2.1.25-linux.tar.gz

move the decompressed folder to the opt directory

sudo mv android-studio /opt

make a link to the executable

sudo ln -sf /opt/android-studio/bin/studio.sh /bin/android-studio

launch android studio for the first time and follow the wizard

android-studio

create a new blank project

Install java jdk

sudo apt install default-jdk

Download and install apktool

Download the Linux wrapper script. (Right click, Save Link As apktool)
Download the latest version of Apktool.
Rename the downloaded jar to apktool.jar.

Move both apktool.jar and apktool to /usr/local/bin. (root needed)

sudo mv apktool /usr/local/bin; sudo mv apktool.jar /usr/local/bin

Make sure both files are executable. (chmod +x)

chmod +x /usr/local/bin/apktool
chmod +x /usr/local/bin/apktool.jar

Try running apktool via CLI.

Get the APKs

Get pivaa

Pivaa by HTBridge

git clone https://github.com/HTBridge/pivaa.git

The apk is in the folder apks

or get the apk from this repo

Get InjuredAndroid

InjuredAndroid by B3nac

The official repo is not maintained anymore but we can still play with the apk

You can find it in this repo

Get AndroGoat

AndroGoat by satishpatnayak

Which Android For Pivaa

sdk 26

Which Android for InjuredAndroid

sdk 29

Which Android for AndroGoat

sdk 18

Set up proxy on emulator

Export the burp cert (video will be shown during workshop on how to)
search "cert" in the settings
Click on "Install cert"
The burp cert should be in downloads after drag and drop

In the latest version of android studio you might not find the network settings in the emulator. To find them uncheck the box in the settings of android studio (see screenshot below):
image

Source: stackoverflow

About

Materials for RSAC2024 Workshop

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published