Android-Exploits

A collection of android Exploits and guide on android exploitation

OWASP Top 10 Mobile Risks

1. Insecure Data Storage
2. Weak Server Side Controls
3. Insufficient Transport Layer Protection
4. Client Side Injection
5. Poor Authorization and Authentication
6. Improper Session Handling
7. Security Decisions Via Untrusted Inputs
8. Side Channel Data Leakage
9. Broken Cryptography
10. Sensitive Information Disclosure

Common Tools

• SSH
• VNC server
• A compiler (gcc / agcc)
• Android SDK (adb!)
• XCode
• Jailbroken iDevice
• Rooted Android Device

Books and Articles

• A survey of Android exploits in the wild - The Android operating system Exploitation Survey
• Popular Android Exploits - Introduction to Android Exploits.
• Own your Android! Yet Another Universal Root - Android root exploitation
• ASDC12-Smart_Bombs_Mobile_Vulnerability_and_Exploitation - Mobile Vulnerability Exploitation
• BlueBorne - Android Exploit - Exploiting an RCE Over the Air
• EVOLUTION OF ANDROID EXPLOITS - Evolution of Android exploits from a statistical analysis tool perspective
• Hacking Androids for Fun and for Profit - Android Exploitation