LevelUpX - Series 12: Finding Sensitive Data in Android Apps with Nerdwell

In this presentation, Nerdwell reviews common developer assumptions about mobile application security and explores ways in which these assumptions can be invalidated. We begin with a review of some new tools that streamline the bug bounty hunter's Android hacking workflow. After that, we present tools and techniques for accessing, identifying, and extracting sensitive data from Android apps' internal storage. Then we wrap up with a discussion of how to maximize the security impact of our findings for impactful bug bounty reports.

Want to get involved?

[cmdsecure]

Fantastic content. More of this please!!