|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/android-app-hacking-black-belt-edition/
课程评论：没有评论
课程名称：安卓应用黑客 - 黑带版 课程概述：在本课程中，您将全面学习安卓应用黑客技术。课程以道德原则为基础，使您成为公司中关于应用安全的顶尖专家。我们将通过对一款手机游戏的黑客攻击，生动有趣地学习复杂的攻击技术。法律提示：我们将黑客攻击的游戏是根据GNU GPL许可证授权的，这意味着我们可以进行修改。未经作者许可的应用黑客行为是严格禁止的！您所学的内容与安全研究相关，我们将以合法和道德的方式教授这些技术。 课程结构：在安装章节中，我们将分析不同智能手机设置的优势与劣势，解锁设备并利用某些功能开始黑客攻击我们的第一个应用。我们将学习如何分析蓝牙低能耗连接并熟悉安卓调试桥（ADB）。接着，我们将深入了解安卓应用的结构，包括AndroidManifest.xml，学习如何利用活动、广播接收器和内容提供者。我们还将编写自己的小应用以利用SQL注入和路径遍历漏洞。 之后，我们将深入反向工程，学习如何反编译安卓应用并重建Java代码，会使用不同的反编译工具，创建流程图和调用图，以处理高度混淆的应用。最后，我们有一个很好的应用来实践所有已学的内容。 课程的重头戏是SMALI章节。SMALI类似于安卓应用的汇编语言，使我们在黑客攻击过程中拥有无限的自由。我们将通过修改手机游戏来练习我们的技能，比如无限生命、隐身或无敌，增加多重攻击弹药、操纵射击频率等。在中间人攻击章节中，我们将学习如何分析移动应用的网络流量，了解HTTPS及其连接的分析，学习证书钉扎及如何绕过不同类型的证书钉扎。 课程的最后一部分是FRIDA，这是一个出色的框架，用于在应用内执行运行时操作。我们将挂钩伪随机数生成器（PRNG），修改骰子应用，学习如何扫描内存中的特定实例，并与应用的用户界面线程进行交互。我们还将创建新对象，并通过为游戏应用编写自己的训练器来实践这些技能。最后，我们将用Ghidra分析本地C函数，并通过FRIDA进行操作和修改。 经过所有章节的学习后，您将成为公司中安卓应用安全的顶尖专家。那么，您还在等什么呢？
In this course you will learn absolutely everything about android app hacking. This course teaches you the ethical principles and enables you to become the top expert of your company regarding to app security. We learn really complex attacks in the most funny way that's possible, by hacking a mobile game. Legal note:The game we are going to hack is licensed under the GNU GPL, which means, we are allowed to perform such modifications. Hacking apps without having the permission of the author is strongly forbidden! The things you learn are related to security research. I am teaching you all of this in a legal and ethical way. Course - Structure:In the installation chapter we will analyze different smartphone setups, their strength and their weaknesses. We unlock our device and use certain features to already start hacking our first apps. We will learn how to analyze bluetooth low energy connections and get familiar with the Android Debug Bridge (ADB).We move on to the android app structure. Here we gain a rock solid understanding about the key components of an android app. We will analyze the AndroidManifest.xml and learn how to exploit activities, broadcast receiver and content provider. We will write our own small apps to exploit SQL injections and path traversals.Afterwards we take a deep dive into reverse engineering. We will learn how to decompile an android app and reconstruct the Java code. We will have a look at different decompilers and create flow- and call graphs to deal with highly obfuscated apps. Finally a nice application is waiting for us to practice all the things we have learned so far.Then we have the treasure of this course, the SMALI chapter. SMALI is like an assembly language of an android application and gives us unlimited power in hacking them. We practice our skills by modifying our mobile game to have infinite lives, become invisible or invincible. We add multiple player shots, manipulate the fire rate and many more. In the man-in-the-middle chapter we will learn how to analyze the network traffic of a mobile app. We will gain an understanding about HTTPS and how to analyze these connections. We will learn how certificate pinning works and bypass several different types of it. The last thing that is missing is FRIDA, which is an amazing framework to perform runtime manipulations within an app. We will hook into the pseudorandom number generator (PRNG) to modify a dice application. We will learn how to scan the memory for certain instances and how to interact with the UI thread of an app. We will create new objects and practice all of this by writing our own trainer for a gaming application. The cherry on top will be the analysis of a native c function with Ghidra and the manipulation and modification with FRIDA.After getting through all these chapters you will be the top expert in android app security of your company. Therefore, what you are wainting for?:)
