Recently, we are concerned about the security of mobile and intend to secure the development of Android platform. This blog post is primarily a record of some study notes on Android security.
- The core of fuzzing technology is sample generation technology
- The method used to test the inter-component communication function of the Android platform is to obtain the intent data format first through reverse analysis or dynamic monitoring, and then to generate samples from the format. The sample is generated and sent to the component under test.
- So far, fuzzing is still the most effective and most productive method of exploiting vulnerabilities. The other big ones are better than fuzzing.
- So far, the Fuzzing tool on the Android platform has only peach as a universal framework, and there is also a intent Fuzzer tool to test inter-component communication
"Reading notes" vulnerability mining and analysis in Android platform
