Insecure Data Storage SQLite database

Android offers multiple standard facilities for data storage

 1.Shared Preferences

 2.SQLite databases

Each of these storage types can be created and accessed in various ways, including managed and native code, or through structured interfaces like Content Providers.

Developers include plaintext storage of sensitive data, unprotected Content Providers and insecure file permissions.

If an attackers gets access to the android mobile then he can use tools to get such information.

This information can include username,password,credit card no.

I will be using Appuse which is a vm developed for Android Application Penetration Testing.

Im using Sieve application.

To get the data stored in SQLite database use the following steps:

1.Get the package name from androidmanifest.xml file of the app.

To get package name of an app use the command

apktool d app_name.apk

2.Open the terminal and enter adb shell.

3.su root (if you are not into the shell as root).

4.cd data/data.

5.Enter the directory of the app using cd package_name.

6.Enter ls.

7.Search for a directory with a name SQLite or database.

8.Enter ls to get all the files in the directory.

9.Copy the file from android to appuse

adb pull data/data/package_name/SQLite/file_name

10.To view the data in the file we will use sqlite3 tool. It is included in the Appuse. To use it open a terminal in appuse and enter sqlite3 filename.

11.Enter .tables to get all the tables in the SQLite database.

12. To view all the data in the table enter command select * from table_name;