For the next exit weer, going to be taking a
look at it. Different ways of saving data
and which ones are potentially insecure. And
one thing that's going to help a lot with this is actually happening access to
a rooted device or device that we can use Superuser with
energy to do this. We can do
it using emulators inside of Android Studio. That is,
it doesn't require you to rooted device, or have your own rooted device,
or actually, a few that are built into Android Studio, but the
way of accessing them is not always particularly clear.
So, I'm going to show you how to set up a rooted device
and access it through a db33, Android
Studio.
Accretive virtual device as we typically due and
the devices that I like to use for. These are
any of the ones without the Play Store icons on them. And usually,
for instance, I would pick one. It's just like
a generic device. Devices are usually just
like more compatible with the different images of
really matter in reality. Which one
you pick up really, any of these will work. But I think, without
the Play Store icon is typically what we want to stick with. So
I'm going to pick the 5.4 in fwvga.
Hit next image that were using is also very
important instead of using the typical recommended images. We
wanted use an x86 image, and we
want to use one that will not have the Google API
included or you can pick anything Wednesday,
Google apis. Well, do you want to pick one from here? That doesn't hot
like that, the typical playset up, what I
mean by that is essentially like when you're taking a look at these ones, these are for you
specifically by Google Inc. And these
ones are through the Android open source project. So a little
bit of background Android is an open-source operating system, which
means that anyone could build images of them, the images
that are in the x86 images are more generic and essentially
the benefit of this is that were able to do things such as
like accessing the permissions on them, rather than
the ones that are built by Google which they have looked down at the
point where you aren't able to access them without finding some
form of exploit to be able to do that. So, in this
case, I'm using the at the pie, one, which is 9.0, x
86 built.
Timothy of selected, the one that you want to use, you can click next and then
we'll give it a name. I'll just call this one.
I'll call it routed to cuz I already have one that's
rooted and we'll press finish.
That way, we put this up, we'll get the typical sort of
Android and you later device out the specific one that I picked has
a bit of a larger resolution compared to the original one
that we were working with. So I got to go ahead and let this food. And
while that's booting up, I'm going to have lunch at my command line. And what
I want to do is going to demonstrate to you, how you can enable the
root permissions and the root aspects of Android
through this device.
So once you've devised. After you're
able to still utilize, like 80 be in the same place, you
could do a Katy B shell to Shell into the device. You can
also use a TV install to install the applications onto
the device that we've been using. The main thing
is, what's inside of the shell. Typically, we don't have full permission so
you can see her permission through tonight. For instance, know,
if you want to fix this, you can just
take an Su and just ask what you two Superuser, what
you could tell by the pound symbol that is now on the command line.
Instead of the dollar sign. Once you have to see that
you no longer get the permission denied errors. This means
that you are now a root user on the device. So it's really
as simple as this. Now again, the reason why I want to show you
this is because their specific folder. Such as Gator, folders
here, that will store data for all the
application. And as you can see, as a root user, we can
access these files. So what are the times when people are making
applications to Steve data to these files that is I'm
sensitive data and free able to access it as a root user.
But it could potentially mean that the revolver bilities, for
instance, if they're stirring things like their API keys or
something like that or the string key to the database that is like
confidential to them. And we might be
able to access certain people to exploit that information. So
we'll take a look at it. And next video for this. I just want to
show you how to get a rooted device 3D Android ADB system.