Rooting Your Devices - StickyMinds Alan Crouch.pdfRooting Your Devices to Test Outside the Box...

K4Keynote4/28/173:15PM

RootingYourDevicestoTestOutsidetheBox

Presentedby:

AlanCrouch

Coveros,Inc.

Broughttoyouby:

350CorporateWay,Suite400,OrangePark,FL32073888---268---8770··904---278---0524-info@techwell.com-https://www.techwell.com/

AlanCrouchCoveros,Inc.AlanCrouchisadirectorofmobiletestingwithCoveros,Inc.,whichhelpscompaniesbuildbetterapplicationsusingagile,DevOps,andsecuritybestpractices.AlanworkswithC-levelandseniormanagementatprivatecompaniesandfederalagenciestotransformandadoptamore"mobile-first"approachtoinformationtechnology.AlanhasworkedwithDepartmentsofHomelandSecurity,Defense,andHealthandHumanServices;Symantec;andmobilestart-upstobuildandtestAndroid,iOS,andresponsivewebapplications.Hispassionistheintersectionofmobiletestingandinformationsecurity.SparetimefindsAlantravelingtheglobeandcreatingadventuresforhissonanddaughter.FollowAlanonTwitter@RealAlanCrouchoronLinkedIn.

4/6/17

1

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 1

Agility.Security.Delivered.

Roo#ng Your Devices to Test Outside the Box

AlanR.Crouch@RealAlanCrouch

MobileDev+Test2017

SanDiego,CA

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 2

Agenda

• What’sHappeningintheWorldofMobile?

• What’s“Everyone”ElseDoing(WhenItComestoMobileTesYng)?

• WhyRootWhenYouTest?• LeveragingRooYngtoTestOutsidetheBox

4/6/17

2

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 3

What’s Happening in Mobile?

MoreDevices,More(User)Control

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 4

What’s Happening in Mobile?

MoreOpera:ngSystems,MoreVersions!

4/6/17

3

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 5

What’s Happening in Mobile?

MoreOpera:ngSystems,MoreVersions!

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 6

What Happening in Mobile?

MoreApps,MoreData,MoreComplexity!

4/6/17

4

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 7

What Happening in Mobile?

MoreApps,MoreData,MoreComplexity!

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 8

What’s Happening in Mobile?

Source:RedHatMobileMaturitySurvey2015

MoreGrowth,MoreMarketSatura:on!

MobileGrowthPlansbyOrganiza:onfor2016

4/6/17

5

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 9

What’s Happening in Mobile?

MorePower,MoreCapabili:es!

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 10

What’s “Everyone” Doing?

• BadhabitsfromtradiYonalapplicaYontesYngcommunityhavepenetratedthemobileapptesYngcommunity• PoorHiringandTrainingPracYces• MobiletestautomaYonisnolongeropYonal

4/6/17

6

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 11

What’s “Everyone” Doing?

• StatusofRooYnginMobileTesYng:

A)  Bears–CuriousTesters/Mother-BearsB)  Ostriches–TestersOvercomebyFearor“Policy”C)  GrumpCats–“Iknowbeeer”Testers

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 12

Because I’m Morally Obligated

• RooYngdoescomewithrisks• VoidedWarranty• Possibilityofbecoming“bricked”

• IsrooYngillegal?• No

4/6/17

7

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 13

Why Root?

• Moresimilarlytestreal-worlduserscenarios.• TesYngonamodifieddevicecanexposeaddiYonaltesYnginterfaces• AdvantagesofRooYng:• AlterorreplacesystemapplicaYons• Runspecializedapps• FullcustomizaYon• Accessnormallyinaccessibledata• TestDataSeeding• FileRecovery• Enable/disabledfeatures• Modify/customizekernels

• MobileSecurityTesYng

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 14

Why Root?

28%

72%

NumberofAndroidDevicesRooted(World-Wide)

Rooted Not-Rooted

Source:TencentStudyonRootedDevices,2015

•  Justhowmanydevicesarerooted?Howbigisit?• ProliferaYonishigheramongsttech-savvy.

4/6/17

8

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 15

Why Root?

Source:TencentStudyonRootedDevices,2015

It’sjustplainfun.

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 16

Root to Test Outside the Box

RootAccessforUsersandApps

•  SuperUsergrantsandmanagesappsabilitytogetrootaccess.• ArootedAndroiddevicewon’tbeasusefulifappsdon’thaverootaccess.Tofixthisproblem,makesureyouinstallSuperUsersoonalerrooYngyourdevice.ThiswillautomaYcallyforceappstoaskpermissiontoestablishrootprivileges.

4/6/17

9

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 17

Root to Test Outside the Box

LocaYon/GPSSpoofing

• AppslikeFakeGPSorLockitoallowyoutonotonlychangeyourGPSlocaYonbutalsobuildiniYneraries.• Byaddingarootedapplike“LuckyPatcher”orXposedyoucanmakeFakeGPSaSystemAppandoverrideGPSSpoofingDetecYon

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 18

Root to Test Outside the Box

AutomatedTasking

• AppslikeTaskerallowyoutosetupautomatedtasks.• ByrooYngyourPhone,Taskercannowperformtaskwithrootaccessallowingittodoanythingfrom:•  Nightlyresetstoa“cleanstate”•  SeedingtestapplicaYondata•  Nightlybackupsofsystemandappdata

•  AutomatedlogaccessArchive

4/6/17

10

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 19

Root to Test Outside the Box

NetworkTrafficAnalysis

• AppslikeSharkforRootallowyoutorecordnetworktrafficandanalyzejustwhatdataisbeingtransferredoverclear-text.• DeterminewhatsensiYvedatamightbeexposedfromyourappincluding:•  Passwords•  Keys•  PersonalData•  SensiYve“App”InformaYon

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 20

Root to Test Outside the Box

RecordandPlaybackofTouchEvents

• RootAppsthatallowrecordandplaybackoftouchevents,suchasRepeYTouchcanbeapoorman’sautomaYontool• RecordandplaybacktoucheventswithloopsorbuiltinresponsetooutsidesYmuli(howtohandleaphonecall)totest“farming”orcommonacYonsinyourmobileapp

4/6/17

11

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 21

Root to Test Outside the Box

ModifyingLocalDataStorage

•  Therearemanyrootedappsthatlookatlocaldatastorageandsharedpreferencestoallowyoutotestyourapps.• Determinewhatyourapphasstoredwhereandwhatyoumightbeabletohack.•  Changeyourstates(level,permissionsetc.)

•  ExploreprivacyviolaYonsondisk•  Recoverpasswords•  Giveyourselflotsof“free”goldorin-gamecurrency

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 22

Root to Test Outside the Box

DeletedFileRecovery

• Non-rootedappsmayallowyoutorecoverdeletedfiles,butotherfiletypesareelusivetorecover• RecoverytoolslikeUndeleterallowyoutorecoveravarietyoffiletypesfromallyourparYYons•  TempData•  CachedData•  Logs•  TextMessages

4/6/17

12

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 23

Root to Test Outside the Box

SecurityTesYng

• NaYveAppTesYng•  CertValidaYontesYngwiththe“XposedFramework”and“JustTrustMe”

•  Root-DetecYonControltesYng•  XposedDetecYoncontrols•  Fuzzing•  APIVulnerabilityTesYng

• MobileWebApp&Network• WifiCrackers•  PenetraYonTesYngMobileWebApps

•  AutomatedInjecYonAeacks

Bugtroid

dSpolit

DroidSQLi

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 24

Conclusion

•  YoucangetawaywithmobiletesYngwithoutrooYng.•  Youcancatchbugsandbuild/testgoodproducts• RooYngcanhelpyouelevateyourtesYngcapabiliYes:•  TESTFASTER•  TESTMORE•  TESTDIFFERENTLY•  HAVEFUN

4/6/17

13

©COPYRIGHT2016COVEROS,INC.ALLRIGHTSRESERVED. 25

Thank You AlanR.Crouch

@RealAlanCrouch