Buggy Mobile Applications – From Leaky APIs To Account Takeover

No ratings

Presented at shellcon 2017 by

Brett Chance

This talk covers at a basic level how to review mobile apps and some really common things I’ve found. The talk is meant to be entry level where at the end of it a user can download Fiddler, Charles Proxy, Burp Suite or another solution and begin reviewing the traffic from their mobile apps and potentially start finding bugs. During this talk I cover examples of bugs that I’ve found and responsibly disclosed to companies. I go over my steps of how I found them and the impact of the findings.