Section 1 : Introduction Mobile Architecture and Threats
۱.۱ Mobile OS
۱.۲ Mobile Problems and Opportunities
۱.۳ OWASP TOP 10 Mobile vulnerability
Section 2 : Android Architecture and Security model
۲.۱ Setting Up Android Pentest Environment
۲.۲ General Android System Architecture
۲.۳ Android OS version
۲.۴ Android Security Model
۲.۵ Understanding Partition and folder layout
۲.۶ Android Permission
۲.۷ Android Rooting
۲.۸ Android Authentication Methods
۲.۹ bypass Authentication Methods
Section 3 : Android Application Architecture
۳.۱ Android application package (APK)
۳.۲ Android application package Components
۳.۳ Android Application components
۳.۴ Android Debug Bridge
۳.۵ Android Application Databases
۳.۶ Working with Sqlite3
Section 4 : Android Application Reverse Engineering and Analysis
۴.۱ Reverse Engineering apk
۴.۲ Static Application Analysis
۴.۳ Dynamic Application Analysis
۴.۴ JDB – java Debugger
۴.۵ Xposed Framework Inspeckage
Section 5 : Android Application Pentest – Part 1
۵.۱ Pentest App With Framework
۵.۲ installing and setting up Framwork
۵.۳ Identifying Attack surface
۵.۴ Testing Activity
۵.۵ Reading Data from Content provider
۵.۶ Input Validation
۵.۷ DT / LF
Section 6 : Android Application Pentest – part 2
۶.۱ M1-Improper Platform Usage
۶.۲ M2-Testing Data Storage on Android
۶.۳ M3-Insecure Communication
۶.۴ M4-Insecure Authentication
۶.۵ M5-Insufficient Cryptography
۶.۶ M6-Insecure Authorization
۶.۷ M7-Poor Code Quality
۶.۸ M8-Code Tampering
۶.۹ M9-Reverse Engineering
۶.۱۰ M10-Extraneous Functionality