Posts on android-security
5 posts on android-security. Notes from public sources and my own test lab.
Trusting Automated Scanners? Welcome to the Illusionary World of Mobile Security
Relying solely on automated security tools is like sailing a paper boat in a storm. Let's talk about why manual testing and defensive depth matter more than flashy PDF reports.
The False Peace of the Sandbox: Why Automation Won't Save You in Mobile Security
Automated scans like MobSF aren't a silver bullet. True mobile security requires looking beyond the sandbox and understanding how real attackers bypass 'secure' local storage and SSL pinning.
Spy in Your Pocket: Did You Hand Over the Keys to Your Mobile App's Backdoor?
Think your compiled mobile app is a secure black box? Think again. We're diving into binary security illusions and the pitfalls of local data storage from a Red Team perspective.
Cebimizdeki Casuslar: Mobil Güvenliğin Görünmeyen Yüzü ve Tersine Mühendislik Maceraları
Mobil uygulamalarda 'güvenli' sandığımız o alanların aslında ne kadar kırılgan olduğunu, kendi yaptığım hatalardan yola çıkarak anlatıyorum. Tersine mühendislikten SSL pinning'e kadar sahada karşılaştığımız gerçekleri konuşalım.
The Trojan in Our Pockets: The Unseen Side of Mobile Security and the 'Safe' Pitfalls
Mobile security is more than just FaceID. From hardcoded secrets in APKs to sensitive data leaking in SharedPreferences, let's dive into the defensive side of mobile app development through the eyes of a Red Teamer.