Many apps process highly sensitive data, but how well do they take care of it? You can quickly set up your own test laboratory for the analysis with our tips.

(Image: Albert Hulm)

Health apps are all the rage, and accordingly many of them are currently seeing the light of smartphone displays. However, there are always reports of spectacular security gaps in such and many other apps or the associated infrastructure. Those who do not want to blindly rely on the skills of the developers can check for themselves how secure an Android app is. Assuming some basic knowledge and the right tools, interesting insights are not far.

Even if you do not have a 1337 H4x0r, you can do something with this article. Previous knowledge of Android, Linux and Java is helpful, but an interest and willingness to learn is much more important. As is known, the best hacking tool is a good search engine. This article shows you basic ways to tackle an Android app. There are also tips and tricks from the practice of a penetration tester.

You first need a PC with an operating system of your choice – am best a Linux so you can play through this article in full. However, most tools also work on Windows and macOS. You also need an Android smartphone that can run the app you’re targeting. A reasonably current Android version should be installed on it: at least version 7.0 (Nougat), better 8.0 (Oreo) or newer. It is advisable to use a smartphone for such experiments that you do not depend on in everyday life.

Access to all contents of heise + exclusive tests , Advice & background: independent, critically sound c’t, iX, Technology Review, Mac & i, Make, c’t read photography directly in the browser register once – read on all devices – can be canceled monthly first month free, thereafter monthly 9, 95 € Weekly newsletter with personal reading recommendations from the editor-in-chief Start FREE month Start your FREE month now heise + already subscribed?

Sign in and read Register now and read the article immediately More information about heise +