Here at NVISO we often perform blackbox, greybox and whitebox penetration tests of mobile applications on both Android and iOS. In an earlier blogpost, we already described how to perform static analysis of APK files. In a series of upcoming blogposts, we will focus on how to build an effective dynamic test environment for Android applications which allows to:
Inspect and modify all traffic generated by the mobile application(s) under assessment
Inspect and modify all local storage generated by the mobile application(s) under assessment
more here..........http://blog.nviso.be/2014/06/setting-up-a-dynamic-android-testbed-part-one-emulated-vs-physical-devices.html
Inspect and modify all traffic generated by the mobile application(s) under assessment
Inspect and modify all local storage generated by the mobile application(s) under assessment
more here..........http://blog.nviso.be/2014/06/setting-up-a-dynamic-android-testbed-part-one-emulated-vs-physical-devices.html