Tag Info

New answers tagged


The OWASP Mobile Security Testing Guide -- https://www.owasp.org/index.php/OWASP_Mobile_Security_Project#tab=Mobile_Security_Testing (a link to the GDocs file as well as a huge overview)


AppSec has a nice list: Reverse Engineering the Application Code Testing for Common Libraries and Fingerprinting Enumeration of Application Known Controllers Information Disclosure by Logcat Hidden Secrets in the Code Storing Sensitive Data on Shared Storage (exposed to all applications without any restrictions) Cryptographic Based Storage ...


No. The profile you're required to install contains the parameter (and the certificates as well) to establish a secure tunnel between your endpoint and the VPN provider. Once connection have been established, at worst the ISP could perform (in abstract) the MITM attack because all your traffic is redirected throughout their server. Perhaps, if you're ...

Top 50 recent answers are included