Manager [easy]: HackTheBox Mobile Challenge (APK Reversing / Traffic Analysis)

Video walkthrough for retired @HackTheBox (HTB) Mobile challenge "Manager" [easy]: "A client asked me to perform security assessment on this password management application. Can you help me?" - We'll reverse engineer an APK file with jadx-gui, debug/profile with android-studio and look at a couple of other approaches to solve the challenge. Hope you enjoy 🙂 #HackTheBox #HTB #CTF #Pentesting #OffSec

HackTheBox: https://affiliate.hackthebox.com/cryptocat-htb
HTB Academy: https://affiliate.hackthebox.com/cryptocat-academy

↢Social Media↣
Twitter: https://twitter.com/_CryptoCat
GitHub: https://github.com/Crypto-Cat
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: https://www.linkedin.com/in/cryptocat
Reddit: https://www.reddit.com/user/_CryptoCat23
YouTube: https://www.youtube.com/CryptoCat23
Twitch: https://www.twitch.tv/cryptocat23

↢HackTheBox↣
https://affiliate.hackthebox.com/cryptocat-htb
https://twitter.com/hackthebox_eu
https://discord.gg/hackthebox

↢Resources↣
Ghidra: https://ghidra-sre.org/CheatSheet.html
Volatility: https://github.com/volatilityfoundation/volatility/wiki/Linux
PwnTools: https://github.com/Gallopsled/pwntools-tutorial
CyberChef: https://gchq.github.io/CyberChef
DCode: https://www.dcode.fr/en
HackTricks: https://book.hacktricks.xyz/pentesting-methodology
CTF Tools: https://github.com/apsdehal/awesome-ctf
Forensics: https://cugu.github.io/awesome-forensics
Decompile Code: https://www.decompiler.com
Run Code: https://tio.run

↢Chapters↣
Start: 0:00
Decompile APK with JADX-GUI: 0:50
Debug with Android Studio: 2:43
Analyze Network Traffic in Wireshark: 3:49
Forge Requests in Burp Suite: 7:02
Solve with Python requests: 9:41
End: 10:40

Видео Manager [easy]: HackTheBox Mobile Challenge (APK Reversing / Traffic Analysis) канала CryptoCat