Tools

Top 23 Android Static Analysis Tools – 2018 Compilation

Traditional attacks like phishing, and newer twists like vishing, also impact mobile security. Mobile media adoption is huge when it comes to “texting” with others, not to mention brief phone calls and e-mails to friends and family. Devices and the communication systems they involve are becoming highly trusted, and are a lifeline of communication for many users globally. Criminals […]

Tutorials

Decompile an Android Application with Dex2jar and Jd-GUI

For decompiling an android application, the open source tool which we’ll use is “dex2jar“. Download Link – Dex2jar.zip (Extract in any location) Sample Application – yeahhub.apk (Download & Extract/Move into dex2jar folder) About the yeahhub.apk Application – The application is asking for a secret number, so your task is to decompile it and find that […]

Tutorials

Androwarn – An open source APK static code analyzer

Androwarn is one of the most popular static code analyzer for malicious android applications whose main aim is to detect and warn the user about potential malicious behaviours. Features of Androwarn – Structural and data flow analysis of the bytecode targeting different malicious behaviors categories: Telephony identifiers exfiltration: IMEI, IMSI, MCC, MNC, LAC, CID, operator’s […]

Tutorials

Hack Android using Metasploit over LAN/WAN

In this article, we’ll be discuss about the exploitation of Android devices such as Tablets/Phones/Emulators etc using one of the most popular exploitation framework called as Metasploit Framework and MSFvenom. Here, we will use MSFvenom for generating payload and save as an .apk file and setup listener to Metasploit framework using multi handler. Once user/victim […]