Issue Details
Code Tampering
mobile08 • Rank #8 in OWASP 2024
Explanation
Code tampering involves modifying app binaries to remove security checks, inject malicious functionality, or extract embedded secrets. Attackers use reverse engineering tools to analyze and modify apps. Once tampered, apps can bypass authentication, leak data, or perform unauthorized actions.
Remedy
Implement code signing verification and integrity checks. Use anti-tampering mechanisms to detect modified binaries. Obfuscate code to increase reverse engineering difficulty. Implement runtime application self-protection (RASP) to detect tampering in production.
| Year | Rank | Category |
|---|---|---|
| 2016 | #8 | mobile08 - Code Tampering |
| 2024 | #8 | mobile08 - Supply Chain and Third-Party Dependencies |