Skip to content

Android Application Testing

netbiosX edited this page Jan 11, 2017 · 6 revisions

Manifest File Review

Ensure that the debuggable tag is set to false.

<application
android:debuggable="false"
</application>

The application should disallow the creation of backup files as they might contain sensitive information.

<application
android:allowBackup="false"
</application>

If the application is permitted to write files to external storage of the device then these files should be reviewed for the presence of sensitive information.

<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"/>

Certificate Pinning

TODO