Description

The application's compiled binary, such as an Android APK or another packaged executable, has not been obfuscated using a secure mechanism, allowing an attacker to decompile it and access the source code.

Impact

Obtain the application source code to understand its internal logic and plan further attacks.

Recommendation

- Obfuscate the compiled binary using a secure, up-to-date obfuscation tool appropriate to the platform, applied at build or deployment time. - Apply the strongest obfuscation configuration available, covering all source code files rather than selected classes or functions.

Threat

Anonymous attacker from the Internet with access to the application compiled binary.

Expected Remediation Time

⏱️ 60 minutes.

Requirements

Fixes