Original subtitles

To start things off we're going to take a look at how we can set up a testing environment for us to

be able to try out all these different techniques that we're going to be using for Android vulnerability

testing this sort of setup is going to be something that we'll be able to be used with any sort of application

that you're trying to test or do.

Vulnerability analysis on most applications are going to work in emulators through Android Studio.

So you don't have an actual Android device.

You'll be able to access it through Android Studio to be able to at least emulate it.

So you could download Android Studio from developer Di Android dot com backslash studio this you are

all right here and you're just gonna go ahead and download the Android Studio version that corresponds

to your operating system version.

In this case I'm using Windows.

So once that's downloaded you're gonna get this application that you'll be able to run and essentially

we'll just walk through the installation in this video and I'll demonstrate how we can set up some emulators

that we'll be able to utilize throughout these videos.

The Android Studio IDC is also going to come with a lot of different tools that are very valuable for

us that will allow us to interact with our emulators and our applications.

So we're gonna go to him next.

We want to get Android Studio and the Android virtual devices to make sure both of these are checked

up.

It will take up a two point three gigs of space does it really matter where you install it to just.

So wherever you would usually install your stuff then hit on install and it will go through the installation

process so once this installation process is complete you'll have the Android tool kit.

That's like HDB in those sort of tools that we'll be using throughout this.

And as well you have access to write your own code as well as run emulators.

So you ever want to test specific concepts Android Studio is a good way to do it because you're able

to actually write code inside of it.

In addition to this you have some emulator set up and you'll be able to access and work with those so

we'll discuss a bit about working with emulators as well to get an idea of that and that will be sort

of in future videos as well as the completed we can hit next and finish to launch Android Studio.

So now I will ask you whether you want to input any settings or not.

In this case I do have an older install that I can import from work and choose to import settings for

your first time you probably won't have to import anything at all.

So in this case again because I had an older installation it's going to ask me about things with system

files and I can sort of lead those directories just to clear up some of the data that's there.

And then from here a launch Android Studio now launching Android Studio will take a little bit of time.

It's it's it it's an application that typically is a little bit slow.

I guess you could say on a lot of computers it really depends on your computer it might take a little

bit of time to actually boot up to begin with.

So don't be alarmed if it takes some time to start up see once you get here a little loading the components

will load in the modules and then once this is done we'll be able to access what we're really looking

to get to which is the emulators.

Now I don't necessarily think that you have to install all of Android Studio in order to get to the

insulators but I think it's good to have the whole thing available just that way you're able to have

all of the features that come with interest studio because there's a lot of helpful stuff inside of

it.

So you'll see that you'll load into the Android Studio page.

Use might not look exactly like mine because mine has a current like application that's being developed

so yours might look slightly different.

However you should have all these toolbars available to you.

And the main toolbar that we're interested in is this one here which is the E D manager if you don't

have access to it through here.

I believe we're able to get access to it through the view.

There's a few different to a windows that are available inside of here.

You just want to make sure that each of your like toolbar and navigation bar and main menu instead as

far all enabled that you're able to access this when you click on this.

What it will do is it will load up a page that will show over Android virtual devices and you see in

this case I have none available which means that I can just create a new virtual device in this case.

So these virtual devices will have a little bit of customization you'll essentially have access to be

able to create things that mimic the hardware of any of the Google devices see to see that there's phones

there's TV there's the tablets the watch OS is the automotive voices as well so you can emulate any

of those and you can pick really any of these that you'd like.

Let's just say I'll pick a pixel three for this example and you'll see inside of here there'll be a

whole bunch of different operating systems that you can pick and you'll have to download them the first

time that you want to utilize them you'll see on here you can see like which version it is.

So there's like Android 10 Android nine hundred eight point one so you can really pick whatever Android

version you'd like for this one we'll just use Android nine point 0 because I have it downloaded and

available there are really too many major operating system differences when we're working with vulnerability

analysis of applications.

But in general you just want to pick operating systems that are supported still so whatever supported

by the application you're looking dependent pen test would be what you're picking out of here.

But in this case we'll just pick nine point 0 for this example and see we'll be able to give it a name.

So I'm going to call mine pixel 3 vulnerability analysis just to give it like a unique name so I know

what it is.

And you can customize other details about it such as like the startup orientations and the performance

pieces you should just leave these all defaults and click finish and now we'll have the device available

to us to see from here we can just click on the play button and this will actually launch the device

for us to be able to use.

So let's go ahead and try that and let it run again it might take a few minutes for it to launch the

emulators as well tend to be a little bit slow to startup but once things start it up then it starts

to run pretty well and you'll be able to like work with them relatively flawlessly depending on how

fast your computer is.

I think most modern computers would be able to run emulators fairly well of course emulators aren't

really computationally intensive for the phones because the phones themselves don't use a huge amount

of hardware comparative to computers.

But yeah I got your mileage may vary depending on what kind of computer you're using and just what this

is loading here.

Also note that if you have an Android device you can utilize it for this testing as well.

The reason why I use emulators myself is because we're gonna be installing purposefully vulnerable applications

onto these devices so we don't really want to do that on a live device.

We mostly want to do that on emulators that we aren't like impacting the performance of our actual devices.

Selves.

But if you do want to utilize it you can simply just plug in your USP device and then you'll have to

enable us be debugging which I'll talk about in a future video.

To be able to actually get onto the device through ADP and then from there you'll be able to follow

along just as if you were using an MBA later.

So just keep in mind you don't necessarily always have to use the emulators you can use things such

as devices as well.

So those will work to so we can tell that this is working and running because the size of that disk

is increasing as the emulator launches the size on the disk will slightly increase.

I think usually they end up taking about like nine or 10 gigs and then as you install more stuff they'll

start to take up more and more space.

So that's just something to generally keep in mind.

You'll notice down here it also says that it's indexing a lot of the time Android Studio is going to

be working through different things to index it get things set up.

So again just be patient with Android Studio.

It will eventually start to run the things that you need it to run.

So this at least gives you a good idea about how we can install the environments that we'll be able

to test with in the next video.

We'll take a look at how we can use ADP to shell into a device and we'll also take a look at how we

can then install the applications that we want to work with in these videos.

And then from there we'll dive right into the vulnerability analysis and take a look at the different

types of common vulnerabilities that exist.

Take a look at how to analyze applications and figure out what common vulnerabilities we might want

to look at.

So that's what we'll be what we take a look at in the next video.

For now you've got your emulator setup you've got your environment set up so you should be ready to

progress on.