تست نفوذ و مهندسی معکوس اندروید اپلیکیشن

Insecure Logging
Hardcoding Issues
Access Control Issues
Flawed Broadcast Receivers
Intent Sniffing and Injection
Weak Authorization mechanism
Local Encryption issues
Vulnerable Activity Components
Root Detection and Bypass
Emulator Detection and Bypass
Insecure Content Provider access
Insecure Webview implementation
Weak Cryptography implementation
Application Patching
Sensitive Information in Memory
Insecure Logging mechanism
Android Pasteboard vulnerability
Application Debuggable
Android keyboard cache issues
Android Backup vulnerability
Runtime Manipulation
Insecure SDCard storage
Insecure HTTP connections
Parameter Manipulation
Hardcoded secrets
Username Enumeration issue
Developer Backdoors
Weak change password implementation
Emulator Detection
Insecure Data Storage – Shared Prefs – 1
Insecure Data Storage – Shared Prefs – 2
Insecure Data Storage – SQLite
Insecure Data Storage – Temp Files
Insecure Data Storage – SD Card
Input Validations – XSS
Input Validations – SQLi
Input Validations – WebView
Unprotected Android Components – Activity
Unprotected Android Components –Service
Unprotected Android Components – Broadcast Receivers
Network intercepting – HTTP
Network intercepting – HTTPS
Network intercepting – Certificate Pinning
Misconfigured Network_Security_Config.xml
Android Debuggable
Custom URL Scheme
SQL injection
Directory traversal
Authention bypass
Data leakage

همراه با پیاده سازی استاندارد تست نفوذ موبایل OWASP برای جذب بازار کار