Skip to content

Latest commit

 

History

History
25 lines (15 loc) · 1.24 KB

How to check missing integrity.md

File metadata and controls

25 lines (15 loc) · 1.24 KB

How to check Integrity checks

Integrity checks are used to ensure that data or files have not been tampered with or modified in an unauthorized way. In android apps, integrity checks can be used to verify that the app and its components have not been tampered with or modified.

Steps to check for missing integrity check:

  1. Obtain a copy of the APK file for the Android app that you want to check for missing integrity check.

  2. Use a tool such as Apktool or Jadx to decompile the APK file and view the app's source code.

Search the codebase for any calls to integrity check functions such as, Hash or digital signature verification Checksum calculation and validation Certificate Pinning Code signing

  1. Check if the app uses any integrity check functions that are specific to the platform like, Android Verified Boot or Android SafetyNet.

  2. Check if the app uses any integrity check functions that are specific to the app like, custom signature or custom checksum.

  3. Check if the app uses any integrity check functions that are standard like, SSL certificate pinning.

  4. Check if the app uses any integrity check functions that are recommended by OWASP.

  5. Check if the app uses any anti-debugging or anti-tampering mechanism.