Downloaded 15 times
Uploaded bySam Bowne
CNIT 128 6. Analyzing Android Applications (Part 3)
This document provides a comprehensive overview of analyzing Android applications, focusing on reverse-engineering techniques and security models. It covers rooting methods, generic exploit mitigations, and various vulnerabilities associated with Android devices. Additionally, it details tools and techniques for vulnerability scanning and code modification in applications.
More Related Content
![[Wroclaw #1] Android Security Workshop](https://cdn.slidesharecdn.com/ss_thumbnails/owaspplwroclaw1-160225150939-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to CNIT 128 6. Analyzing Android Applications (Part 3)
CNIT 128 6. Analyzing Android Applications (Part 3)
- 1. CNIT 128 Hacking MobileDevices 6. Analyzing Android Applications Part 3
- 2. Topics • Part 1 •Creating Your First Android Environment • Understanding Android Applications • Part 2 • Understanding the Security Model: p 205-222 • Part 3 • Understanding the Security Model: p 222ff • Reverse-Engineering Applications
- 3. Topics in Part3 • Generic Exploit Mitigation Protections • Rooting Explained • Reverse-Engineering Applications
- 4.
- 5. Exploit Mitigations • Makethe underlying OS more secure • So even unpatched legacy code is safer • Many of these mitigations are inherited from Linux
- 12.
- 13.
- 14. Root Access • Bydefault Android doesn't allow users to use root • Rooting typically adds a su binary • Allows elevation to root • So su itself must run as root
- 15. SUID Permissions • Runswith owner's permissions • Even when launched by someone else
- 16. Security of su •On Linux, it asks for a password to allow elevation • On Android, it pops up a box like this
- 17. Rooting Methods • Usingan exploit • Using an unlocked bootloader
- 18. Exploits • Gingerbreak • Exploitedvold to write to the Global Offset Table (GOT) in Android 2.2 and 3.0 • Bug in Google's original Android • Exynos abuse • Bug in driver for exynos processors, used by Samsung • Only affected some devices
- 19. • Samsung Admire •Exploited dump files and logs to change pemissions on adb • Worked only on specific device • Ace Iconia • Pre-installed SUID binary with code injection vulnerabiliti Exploits
- 20. • Master Key •Make a modified system app • Re-install it with the same signature • Works on most Android versions prior to 4.2 • Towelroot • Exploits locks used when threading • Rooted many devices Exploits
- 21. • Flash newfirmware onto device • A new recovery image, or • A rooted kernel image containing su • May void warranty or brick your phone Unlocked Bootloader
- 23.
- 24.
- 25.
- 26. In the Projects •Pulling an APK from the phone with adb • Disassemble with apktool
- 27. Vulnerability Scanning • Qarkand AndroBugs
- 28.
- 29.
- 30.