Android hacking tools update for Sept 2018

Posted on by David Vassallo

This article outlines a few "lessons learned" during an Android pen-test, specifically on which parts of my toolset I needed to update to accommodate newer android versions (Android v7+) MultiDex support One of the standard pen-test techniques is to decompile the App's source code. Typically this is done by converting the APK DEX code to … Continue reading Android hacking tools update for Sept 2018

Advertisement

Lessons Learned: CrossWalk and Enhanced Webviews

Posted on by David Vassallo

I recently had a problem (seems to be a very common one [1][2][3]) when building a hybrid HTML5 mobile app. As can be seen in this online demo (https://mobilehtml5.org/ts/?id=23), one can use the input html tag with type="file" accept="image/*" to quickly and easily bring up the user's camera if they visit the site from a mobile … Continue reading Lessons Learned: CrossWalk and Enhanced Webviews