Learn Android Hacking! - University Nevada, Las Vegas (2024)
During DEF CON and Black Hat, Google invited me to give a talk about Android hacking to students as part of init.g at the University of Nevada, Las Vegas. In this talk I share my approach to learning Android hacking and reverse engineering, which can also be adapted to other technical topics. LEARN ON HEXTREE (ad) Learn hacking on Hextree: https://www.hextree.io/ Learn more about Android hacking on Hextree: https://app.hextree.io/map/android Join the Hextree Discord: https://discord.gg/xgQpCQCpvy Watch my Vegas Vlog: https://www.youtube.com/watch?v=bhQ6FF3fCdA Article about the init.g event: https://www.unlv.edu/announcement/academics/google-sponsors-initgvegas-student-event-unlv-during-defcon CHAPTERS 00:00 - Android bug bounty and free Hextree courses 01:38 - Two questions for learning to hack anything 02:19 - Attacker positions in the Mobile VRP 04:58 - Choosing reasonable security boundaries 05:48 - Mapping the reachable threat surface 08:03 - Learning from the developer perspective 10:20 - Adding the reverse engineering step 11:18 - Android Studio and JADX 12:10 - Building a first Android application 13:23 - Comparing source code with the APK 14:50 - AndroidManifest as an attack-surface map 16:42 - Finding application logic in MainActivity 18:13 - Layout XML, view IDs, and button handlers 21:23 - Reverse engineering the app and next steps SUPPORT Per video: https://www.patreon.com/join/liveoverflow Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Buy my handwriting font (ad): https://shop.liveoverflow.com/ WATCH, FOLLOW & READ Second channel: https://www.youtube.com/LiveUnderflow Twitch: https://twitch.tv/LiveOverflow/ Twitter: https://twitter.com/LiveOverflow/ Instagram: https://instagram.com/LiveOverflow/ TikTok: https://www.tiktok.com/@liveoverflow_ LiveOverflow blog: https://liveoverflow.com/ Hextree blog (ad): https://www.hextree.io/blog #ReverseEngineering #BugBounty #LiveOverflow (ad) LiveOverflow YouTube channel is supported by advertisement and product placement.