Technical Material¶

Prevention material, checking & tamper detection¶

• https://www.airpair.com/android/posts/adding-tampering-detection-to-your-android-app
• https://en.wikipedia.org/wiki/Security_through_obscurity;
• https://darvincitech.wordpress.com/2020/03/01/yet-another-tamper-detection-in-android/;
• https://medium.com/avi-parshan-studios/protecting-your-android-app-against-reverse-engineering-and-tampering-a727768b2e9e;
• https://medium.com/@mplacona/tampering-detection-in-android-d213998ecc4f
• https://developer.android.com/google/play/integrity
• https://developer.android.com/training/safetynet/index.html;
• https://www.indusface.com/learning/how-to-implement-root-detection-in-android-applications/;
• https://stackoverflow.com/questions/33850864/how-to-verify-purchase-for-android-app-in-server-side-google-play-in-app-billin.

Server-Side checks¶

• https://developer.android.com/training/safetynet;
• https://medium.com/@lahirumaramba/protecting-your-own-backend-services-with-firebase-app-check-1daaef229f32.

Attack vectors¶

• https://mobile-security.gitbook.io/mobile-security-testing-guide/android-testing-guide/0x05c-reverse-engineering-and-tampering.

Code¶

• https://gist.github.com/scottyab/b849701972d57cf9562e;
• https://github.com/mukeshsolanki/Android-Tamper-Detector;
• https://stackoverflow.com/questions/50126775/detecting-code-tampering-in-apk;
• https://stackoverflow.com/questions/13445598/lucky-patcher-how-can-i-protect-from-it.