Food Store (Mobile Hacking Lab)

This writeup details the solution to the Food Store challenge available here: https://www.mobilehackinglab.com The lab requires static analysis of the APK file to identify a SQL injection vulnerability in the user registration process which allows for sign up at a higher privilege level. App Exploration Initially running the app brings us to a log in screen but we can also sign up: The advisory…