Android Application Security Part 1- Setup Mobile Pentesting Platform

I think this will be the easiest blog post which i am going to write in this series because of the Awesome tool Appie which contains all the tools neccessary for Android Application Assessment. So you just need to Download if you have not downloaded it yet.

Q. That’s All ?

Nope. Although Appie contains the most of the tools neccessary for Android Application Pentesting. But we need a Android Device assess apps. So for that we need to create an Emulated Android Device and install Genymotion for that.

  • Now, we need to Download and Setup  Genymotion
  • Enter your credentials for setting up the account as given above and then after activating the account please move to the URL  https://cloud.genymotion.com/page/launchpad/download/  and then choose the option as given in the Image Below.
  • After downloading the setup and installing on the local computer. Open settings in the Genymotion  and then after inserting your credentials which you have registered on Genymotion site.
  • Click on Add.
  • Then Choose Google Nexus 4-4.2.2 and click next. There is a reason for choosing this device with Android 4.2.2 because we will be using Cydia Susbtrate which can only work up to Android 4.2

  • So now u have an Working Virtual Android device which is an important part in Android Pentesting.

Now you also need to set adb path in Genymotion which is there is Appie in order to use virtual device with Appie.

  • First go to Genymotion then click on settings.
  • Then in the ADB tab, select “Use Custom Android SDK Tools”
  • Then select the path of sdk folder which is located at path_to_appie/bin/adt/sdk/

If it through an error that “AAPT tool not found”. Ignore it.