4 ms·
Many companies have built software products on top of this tool. I was heavily involved in enterprise apps for several years. It's a great tool
by seibelj 11y ago
Many companies have built software products on top of this tool. I was heavily involved in enterprise apps for several years. It's a great tool
- 616c 11y agoAs a hobbyist Android geek that has done minor Android dev work, I can see the use of the tool. But I am very curious: who is building enterprise tools on top of it and why? I could see securiy analysts interested, but beyond that? This is not meant to be dismissive, I am very curious. It sounds like there is cool stuff out there I could not even dream of!
- ryhanson 11y agoI would bet that static analysis is going to be one of the top reasons. Being able to automate the process of analyzing code for leaked keys, outdated/vulnerable libraries, insecure storage, permissions, etc. Here is an open-source tool I've used in the past to do quick static security checks on APKs: https://github.com/ajinabraham/Mobile-Security-Framework-MobSF https://github.com/ajinabraham/Mobile-Security-Framework-Mob... It also supports dynamic analysis, but I haven't used that portion of it yet. I, too, am interested in the other enterprise tools that are built on top of this though.
- RyanZAG 11y agoThere's a concept called 'app wrapping'. A generic app is decompiled, and then the manifest and code is changed to add in some 'wrapper' code around the app. The app can then be resigned with the enterprises certificate.