Skip to content

Android Hacker Protection Level 0

Tim StrazzereJon Sawyer

Tim Strazzere and Jon Sawyer explores android hacker protection level 0 at DEF CON 22, examining android-security and practical defenses.

Summary

Architecture and Background

Android Hacker Protection Level 0 Tim Strazzere LEAD RESEARCH & RESPONSE ENGINEER Jon Sawyer CTO OF APPLIED CYBERSECURITY LLC Obfuscator here, packer there - the Android ecosystem is becoming a bit cramped with different protectors for developers to choose. With such limited resources online about attacking these protectors, what is a new reverse engineer to do?

Vulnerability Analysis

Have no fear, after drinking all the cheap wine two Android hackers have attacked all the protectors currently available for everyones enjoyment! Whether you've never reversed Android before or are a hardened veteran there will be something for you, along with all the glorious PoC tools and plugins for your little heart could ever desire.

Exploitation and Demonstrations

Tim "diff" Strazzere is a Lead Research and Response Engineer at Lookout Mobile Security. Along with writing security software, he specializes in reverse engineering and malware analysis.

Remediation and Defensive Strategies

Some interesting past projects include having reversing the Android Market protocol, Dalvik decompilers and memory manipulation on mobile devices. Past speaking engagements have included DEFCON, BlackHat, SyScan, HiTCON and EICAR. Jon "Justin Case" Sawyer - 31 yr old father of four, and CTO of Applied Cybersecurity LLC. Jon likes to spend his nights with a fine (cheap) glass of wine, writing exploits for the latest Android devices. When not researching vulnerabilities or writing exploits, he dabbles in dalvik obfuscation.

Related talks

Main Stage·46 min

  • DEF CON
  • Mobile
  • Date: Aug 2014
  • Location: Las Vegas

Luca Bruno · Mariano Graziano

Luca Bruno and Mariano Graziano details through the Looking-Glass, and What Eve Found There Luca "kaeso" Bruno RESEARCH ENGINEER, EURECOM Mariano "emdel" Graziano PH.

android-securitymobile-internalsprivilege-escalation+2

Main Stage·56 min

  • DEF CON
  • Mobile
  • Date: Aug 2014
  • Location: Las Vegas

Ladar Levison · Stephen Watt

Ladar Levison and Stephen Watt explores dark mail: architecture and cryptography at DEF CON 22, examining android-security and practical defenses.

android-securitymobile-internalsprivilege-escalation+2