Cyber Life Podcast Ep. 28 - Mobile Application Security with Nabeela Bukhari

In this episode, I speak with Nabeela Bukhari about mobile application security. Be sure to check out the resources linked below.

Nabeela is a senior security engineer primarily focused on app security and mobile app security. She holds a degree in Electronics Engineering and several certifications. Nabeela is also a volunteer with BBWIC and helps mentor women in their cybersecurity careers around the world.

Resources shared on the podcast:

https://mas.owasp.org/MASTG/ - MSTG Guide

https://owasp.org/www-project-mobile-top-10/ - OWASP TOP 10 Mobile

https://github.com/MobSF/Mobile-Security-Framework-MobSF- MOBSF

Tools:

Frida- https://frida.re/

Objection- https://github.com/sensepost/objection/wiki/components

Drozer- https://github.com/WithSecureLabs/drozer

JADX-Gui- https://github.com/skylot/jadx

Vulnerable Android apps for learning:

InjuredAndroid

https://github.com/B3nac/InjuredAndroid

Walkthrough Video: https://www.youtube.com/watch?v=PMKnPaGWxtg

Google Play Link: https://play.google.com/store/apps/details?id=b3nac.injuredandroid

Android AppSec

CTF site: ctf.hpandro.raviramesh.info

Walkthrough Video:https://www.youtube.com/c/AndroidAppSec

Google Play Link: https://play.google.com/store/apps/details?id=com.hpandro.androidsecurity

Damn Vulnerable Bank

Link: https://github.com/rewanthtammana/Damn-Vulnerable-Bank

Walkthrough Video: https://rewanthtammana.com/damn-vulnerable-bank/

Insecure Shop

Link: https://github.com/optiv/InsecureShop/releases/download/v1.0/InsecureShop.apk

GitHub: https://github.com/optiv/InsecureShop

Walkthrough Video: https://docs.insecureshopapp.com/

AndroGoat

Link: https://github.com/satishpatnayak/MyTest/blob/master/AndroGoat.apk

GitHub: https://github.com/satishpatnayak/AndroGoat

Walkthrough Video: https://medium.com/androgoat

Crackmes

Link: https://github.com/satishpatnayak/MyTest/blob/master/AndroGoat.apk

GitHub: https://github.com/OWASP/owasp-mstg/tree/master/Crackmes/Android

Walkthrough: https://github.com/OWASP/owasp-mstg/tree/master/Crackmes

InsecureBank

Link: https://github.com/dineshshetty/Android-InsecureBankv2/raw/master/InsecureBankv2.apk

GitHub: https://github.com/dineshshetty/Android-InsecureBankv2

Oversecured Vulnerable Android App

GitHub: https://github.com/oversecured/ovaa

Blog: https://blog.oversecured.com/

DIVA Android

GitHub: https://github.com/payatu/diva-android

Walkthrough: http://www.payatu.com/damn-insecure-and-vulnerable-app/

MSTG Hacking Playground

GitHub links: https://github.com/OWASP/MSTG-Hacking-Playground

https://github.com/OWASP/MSTG-Hacking-Playground/tree/master/Android/MSTG-Android-Java-App

https://github.com/OWASP/MSTG-Hacking-Playground/tree/master/Android/MSTG-Android-Kotlin-App

Ask me a Question Here: https://topmate.io/ken_underhill

Get better at job interviews and build your confidence with this short course.