domains / families / security / exploiting-insecure-data-storage-in-mobile

exploiting-insecure-data-storage-in-mobile

separate

'Identifies and exploits insecure local data storage vulnerabilities

When to use

• Assessing whether mobile applications store sensitive data securely on the device filesystem
• Testing for credential leakage through SharedPreferences, SQLite databases, or plists
• Evaluating keychain/keystore implementation for proper access control attributes
• Performing data-at-rest security assessment during mobile penetration tests

When not to use

• Production user devices without authorization

Skill page

Source