From the course: Writing Secure Code for Android by Infosec
Unlock this course with a free trial
Join today to access over 25,400 courses taught by industry experts.
Activity: Filtering a malicious QR code, part 2
From the course: Writing Secure Code for Android by Infosec
Activity: Filtering a malicious QR code, part 2
- [Instructor] Code tampering and injection. Activity, filtering a malicious QR code part two. We have built and run our QR code generator. Now we need to scan something. Go to some online QR code generator. It doesn't really matter which one so long as they show you the QR code right off the bat. I've picked the first one that showed up in a Google search. What we're going to do is just put in our code right here. So they say you can put in whatever you like, website, text, file, something. So let's say that the merchant's first code is 1234. And you can see they actually create the code right here. You can download it, but I'm not even going to bother. I'm going to hold my phone up right now and I'm going to scan the QR code. So I'm holding my phone up, I'm pressing the button to scan the QR code. It's asking me if it's allowed to use the camera. I click allow. (phone beeping) And you can see it acquired the code. Cool. Let's now try something with illegal characters. So 1234, and…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
(Locked)
Understanding input risks14m 59s
-
(Locked)
Autocompletion, part 113m 34s
-
(Locked)
Autocompletion, part 29m 13s
-
(Locked)
Activity: Securing autocomplete4m 30s
-
(Locked)
Special characters, part 111m 4s
-
(Locked)
Special characters, part 26m 3s
-
(Locked)
Activity: Using special characters11m 25s
-
(Locked)
Null safety, part 112m 17s
-
(Locked)
Null safety, part 2: Safe call operator4m 41s
-
(Locked)
Null safety, part 3: Not-null operator3m 35s
-
(Locked)
Null safety, part 4: Elvis operator7m
-
(Locked)
Null safety, part 5: Safe cast and unsafe cast operators7m 57s
-
(Locked)
Null safety, part 6: Smart cast8m 55s
-
(Locked)
Activity: Implementing null safety, part 111m 35s
-
(Locked)
Activity: Implementing null safety, part 213m 18s
-
(Locked)
Activity: Implementing null safety, part 315m 15s
-
(Locked)
String interpolation11m 2s
-
(Locked)
Activity: Understanding string interpolation15m 8s
-
(Locked)
Format string attacks7m 42s
-
(Locked)
Regular expressions, part 114m 4s
-
(Locked)
Regular expressions, part 26m 26s
-
(Locked)
Activity: Working with regular expressions in Kotlin, part 114m 1s
-
(Locked)
Activity: Working with regular expressions in Kotlin, part 210m 3s
-
(Locked)
Activity: Validating input with regular expressions in Kotlin, part 314m 56s
-
(Locked)
Input sanitization7m 4s
-
(Locked)
Activity: Sanitizing input3m 51s
-
(Locked)
Activity: Clamping input to a range5m 16s
-
(Locked)
Kotlin filter and trim6m 35s
-
(Locked)
Activity: Filtering and trimming9m 49s
-
(Locked)
Cross-site attacks14m 13s
-
(Locked)
Activity: Exploring cross-site scripting10m 8s
-
(Locked)
Cross-app scripting4m 42s
-
(Locked)
Activity: Defending against cross-app scripting9m
-
(Locked)
Code tampering and injection, part 17m 7s
-
(Locked)
Code tampering and injection, part 210m 35s
-
(Locked)
Code tampering and injection, part 311m 37s
-
(Locked)
Activity: Filtering a malicious QR code, part 18m 57s
-
(Locked)
Activity: Filtering a malicious QR code, part 23m 59s
-
(Locked)
SQL injection14m 24s
-
(Locked)
SQL stored procedures4m 55s
-
(Locked)
Object deserialization, part 14m 48s
-
(Locked)
Object deserialization, part 24m 25s
-
(Locked)
Activity: Protecting JSON with an API key, part 116m 17s
-
(Locked)
Activity: Protecting JSON with an API key, part 24m 48s
-
(Locked)
Form validation, part 112m 12s
-
(Locked)
Form validation, part 29m 37s
-
(Locked)
Form validation, part 36m 29s
-
(Locked)
Activity: Validating form input, part 113m 29s
-
(Locked)
Activity: Validating form input, part 24m 36s
-
(Locked)
WebView vulnerabilities, part 111m 34s
-
(Locked)
WebView vulnerabilities, part 210m 13s
-
(Locked)
Activity: Securing Android WebView11m 53s
-
(Locked)
-
-
-
-
-
-