移动应用程序渗透测试：Android架构与测试环境详解

需积分: 5 32 浏览量更新于2024-01-25 收藏 6.27MB PDF 举报

"eLearnSecurity移动应用程序渗透测试.pdf；网络安全渗透测试;eLearnSecurity Mobile Application Penetration Testing (eMAPT) ANDROID Notes by Joas https://www.linkedin.com/in/joas-antonio-dos-santos Summary Warning ......................................................................................................................................... 3 Android Architecture .................................................................................................................... 3 Testing Environment ...........................................;" 本文是关于eLearnSecurity移动应用程序渗透测试的综述。该综述是基于"eLearnSecurity移动应用程序渗透测试.pdf"和"eLearnSecurity Mobile Application Penetration Testing (eMAPT) ANDROID Notes by Joas"的内容。文中首先提到了一个警告，但未给出具体信息。接下来，对Android架构进行了简要介绍。Android是一种广泛使用的移动操作系统，具有多种层次的架构，包括应用程序、应用框架、系统运行库、Linux内核和硬件抽象层等。了解Android的架构有助于理解移动应用程序渗透测试的相关知识。接下来讨论了测试环境。在进行移动应用程序渗透测试时，需要创建一个合适的测试环境来模拟真实的攻击场景。测试环境包括操作系统、模拟器和其他必要的工具。这些工具可以帮助测试人员识别应用程序中的漏洞和安全薄弱点，以便进行修复和改进。本文提供了一个链接，指向了Joas的LinkedIn个人主页。在该主页上，可以找到更多关于移动应用程序渗透测试的信息，Joas分享了他的笔记和经验，供读者参考。总的来说，本文综述了eLearnSecurity移动应用程序渗透测试的一些关键内容。它提供了对Android架构的概述，并讨论了创建测试环境的重要性。此外，还提供了一个链接，可供读者进一步了解和学习相关知识。

XML attributes

Description

android:layout_height

Used to declare the height of View and

ViewGroup elements in the layout.

android:layout_marginLeft

Used to declare the extra space used on the left

side of View and ViewGroup elements.

android:layout_marginRight

Used to declare the extra space used on the

right side of View and ViewGroup elements.

android:layout_marginTop

Used to declare the extra space used in the top

side of View and ViewGroup elements.

android:layout_marginBottom

Used to declare the extra space used in the

bottom side of View and ViewGroup elements.

android:layout_gravity

Used to define how child Views are positioned

in the layout.

https://github.com/android/architecture-samples

Android operating system is a stack of software components which is

roughly divided into five sections and four main layers as shown below in

the architecture diagram.

Each Android app is activated in its own security sandbox, protected by the following Android

security features:

• The Android operating system is a multi-user Linux system where each application is a

different user.

• By default, the system assigns each application a unique Linux user code (the code is

used only by the system and is unknown to the application). The system sets

permissions for all files in an application so that only the user code assigned to that

application can access them.

• Each process has its own virtual machine (VM), so an application's code runs in

isolation from other applications.

• By default, each application runs in its own Linux process. Android starts the process

when it needs to run some application component. It then shuts it down when it is no

longer needed or when the system needs to reclaim memory for other applications.

The Android system implements the principle of least privilege . That is, each application, by

default, has access only to the components it needs to do its job and nothing else. This creates

a very secure environment where the application cannot access parts of the system that it

does not have permission to. However, there is always a way for an app to share data with

other apps and access system services:

• It is possible to have two applications share the same Linux user code, in which case

they are able to access each other's files. To preserve system resources, applications

with the same user code can also be combined to run in the same Linux process and

share the same VM. You must also assign the same certificate to the applications.

• An app may request permission to access device data such as user contacts, SMS

messages, mountable storage (SD card), camera, Bluetooth, etc. The user must

explicitly grant these permissions. To learn more, see Working with System

Permissions .

The remainder of this document introduces the following concepts:

• Fundamental library components that define the application.

• The manifest file where you declare the required device components and features for

the application.

• Separate app code features that allow you to optimize the behavior of a variety of

device configurations.

application components

App components are the building blocks of an Android app. Each component is an entry point

through which the system or user can enter the application. Some components depend on

others.

There are four different types of application components:

• Activities

• services

剩余222页未读，继续阅读

网络研究观

粉丝: 1w+
资源: 2622

移动应用程序渗透测试：Android架构与测试环境详解

渗透测试.pdf

渗透测试-移动环境渗透.pdf

Android APP渗透测试大全.pdf

推荐个渗透测试的课程

如何学习计算机实现攻防

Java 代码实现了一个简单的文本编辑器-可运行

MATLAB实现基于Attention-LSTM的多特征分类预测（含完整的程序和代码详解）

基于Flask和SQLAlchemy 的简易仓库管理系统源码(期末课程设计).zip

民航网上订票系统 JAVA毕业设计 源码+数据库+论文 Vue.js+SpringBoot+MySQL.zip

JAVA项目报告-闹钟的设计与实现.pdf

最新资源

民航网上订票系统 JAVA毕业设计源码+数据库+论文 Vue.js+SpringBoot+MySQL.zip