I have used Frida and Fridump for Memory Dump & Strings Dump on a mobile device which I installed an app for testing.

In the strings.txt file I have extracted using the mentioned above tools, I'm able to find the session token of the application, passwords, and more sensitive information.

What is the correct mitigation for these kind of issues?

  • 1
    Restrict access to the device: physical access is root access and with root, you can do whatever you want. – Stephane Sep 12 '16 at 13:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.