Reverse Engineering Android Apps - Red Rock III

DEF CON Workshops are an opportunity to learn from others in our community in a four hour class. The workshops range in difficulty from n00b to hardcore hacker and on almost any topic that you can think of in the realm of hacking.Now on to some things to keep in mind while you look at which workshop(s) to register for:Workshop Registration will be handled online. Announcement will be made as we get ready to open reg the day before.In order to decrease the number of no-shows, DEF CON Workshops will be instituting a $25 registration fee to attendees. Tickets are available on a first come, first served basis. Additional costs include possible low-fee for material costs, if applicable, and will be collected by the instructor at the time of the workshop.There will be a limited number of students on standby lists for each class, should a registration cancel.There will beNOonsite registration, period. Anyone on standby will be notified they are on standby before the conference. There will beNOonsite standby line or list to sign up for. Everything will be arranged pre-con.Students will be limited to purchasing 2 tickets per class.You can register for as many classes as you can attend in one day. ( No two classes at the same time. If you have mastered occupying two spaces at the same time, there are some physics academics who would be pleased to meet you among others)

DEF CON WORKSHOPS

Title: Reverse Engineering Android Apps
Instructor: Sam Bowne & Elizabeth Biddlecome
Abstract: Practice finding flaws in real Android apps in this fun, CTF-style hands-on workshop, and you will be ready to avoid making security errors in your own apps. Android apps are very easy to unpack, analyze, modify, and repack; partly because of the open nature of the system, and partly because most companies neglect basic security measures. In this workshop, participants will hack apps from Wells Fargo, Microsoft, Lyft, WhatsApp, Whole Foods, IBM, Harvard, Progressive, the Indian government, and other large organizations. We will find insecure network transmissions, broken cryptography, improper logging, and pervasive lack of binary protections.   We will also analyze the way iOS apps use network transmissions, and observe serious vulnerabilities in iOS apps from major companies. We will analyze Android internals in details, using the Drozer attack framework to inspect and manipulate intents to exploit insecure activities and content providers. We will perform a protection level downgrade attack on an Android 4.3 device, removing security protections from the Twitter app. All class materials are freely available on the Web, and will remain available after the workshop. All vulnerabilities were reported to the affected companies long ago, where appropriate. Equipment: participants must bring a laptop that can run VirtualBox machines. The host system can use Mac OS (best), Linux (OK) or Windows (usable but limited). We will use free Android emulators and a Kali virtual machine.   They will be available as free downloads, and also locally on USB sticks.
Level: Intermediate
Pre-Requisites: Familiarity with basic networking and security concepts.
Required Materials: A laptop capable of running VirtualBox.

Flamingo Las Vegas

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Reverse Engineering Android Apps - Red Rock III

More events from DEF CON WORKSHOPS

Follow organizers to get events picked for you

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.

Reverse Engineering Android Apps - Red Rock III

More events from DEF CON WORKSHOPS

Follow organizers to get events picked for you

You might also like...

Sign-In for personalized recommendations

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.