OWASP Bangalore meet - 28th March 2015 10:00 AM - 2:00 PM Mobile Application Security Testing Overview The Building blocks of Android Apps Live demos w.r.t Android App : Demo 1 - Poor Authorization and Authentication (M5) Demo 2 - Sensitive Information Leakage (M4) Demo 3 – Insecure Data storage (M2) Test factory Arsenal

1. Oh Yes, I love your private data
Android App Security
Bangalore Meet up @
Abhinav Sejpal
Fidelity Investments

2. WHO AM I
Next Generation problem Solver
Researcher & Reader in free time
Speaker at
Facilitator at Weekend Testing
Crowd Tester (AKA. Bug bounty Hunter)
Reported Security Vulnerabilities for 50+ unique customers all over the world
inlcluding Apple, yahoo, Outlook, adobe & etc.
Love to develop nasty code & Hack it :)
Works as Security Researcher at
AKA. Bug Wrangler
Null & OWASP Community
Accenture Digital Mobility

3. ~Publication ~

4. DISCLAIMER
This Presentation is intended for educational purposes only and I cannot be held liable for
any kind of damages done whatsoever to your machine, or other damages.
Please - Don't try this attack on any others system without having context knowledge or
permission, this may harm to someone directly or indirectly.
Feel free to use this presentation for practice or education purpose.
It's no way related to my employer - its my own research and ideas.
^ I hope - You gotcha ^

5. SOCIAL MEDIA FEED
Hashtag for this session
#OWASPBlr, #MobileSecurity
: Twitter handle for feedback :
@ @OWASPBangalore Abhinav_Sejpal

6. AGENDA

23. INDIAN HACKERS/INFOSEC GUYS & GROUPS YOU
SHOULD BE FOLLOWING IN TWITTER
Thank-you http://garage4hackers.com/ community

24. @ , @ @ and @
CREDITS
anantshri exploitprotocol adi1391 5h1vang
Big thank and you one & All.OWASPBANGALORE

25. YES - I'M DONE!
Feel free to write me at bug.wrangler at outlook.com

26. LICENSE AND COPYRIGHTS
https://slides.com/abhinavsejpal/owasp-androidsecurity
copyrights 2015-2016 Abhinav Sejpal
-----
(CC BY-NC-ND 3.0)
Attribution-NonCommercial-NoDerivs 3.0 Unported
Dedicated to my lovely daddy