ONLY PLAY STORE DOWNLOAD HOW TO
ONLY PLAY STORE DOWNLOAD INSTALL

Through the project, our goal is to classify mobile security risks and provide developmental controls to reduce their impact or likelihood of exploitation.

The OWASP Mobile Security Project is a centralized resource intended to give developers and security teams the resources they need to build and maintain secure mobile applications. OWASP Mobile Security Project - Top 10 risks In any response to a security question I always like to reference the excellent work from the OWASP foundation. Subscribe to channels you love, create content of your own, share with friends, and watch on any device. See what the world is watching - from the hottest music videos to whatвЂ™s popular in gaming, fashion, beauty, news, learning and more.

ONLY PLAY STORE DOWNLOAD INSTALL

So, if you use the built-in context.getPackageManager().getInstallerPackageName(context.getPackageName()) or any other method you will be safeguarded against normal users that do not install your mobile app from the Google play store, but anyone wanting to attack your mobile app will have several ways of bypassing this protection as I mention above.ДЄ possible to solution to protect your mobile app against attackers bypassing your check is to use Runtime Self Defense Protections or a Mobile App Attestion solution, and I recommend you to read this answer, especially the sections Hardening and Shielding the Mobile App, Securing the API Server and A Possible Better Solution to see how you can prevent your mobile app to work properly when its not your genuine mobile app. Get the official YouTube app on Android phones and tablets. How can I prevent an user to use the app if it has not been downloaded from the Google Play store?

ONLY PLAY STORE DOWNLOAD HOW TO

The Frida Code Share website as a huge set of scripts and one may exist for this propose or can be used as a starting point to see how to write your own script. The only difference is that you need to find the correct Frida script or write yourself one and use it in place of the on to bypass pinning. I wrote an article to show how to use Frida to bypass certificate pinning in an Android app, and the same approach can be used to bypass this check. All without compilation steps or program restarts. Edit, hit save, and instantly see the results. Hook any function, spy on crypto APIs or trace private application code, no source code needed. Inject your own scripts into black box processes.

While this check is possible to achieve programmatically its also possible to bypass by repackaging the app without the check or by using an instrumentation framework at runtime to bypass the check. I want to check and allow the use of my app just if it has been downloaded from the Play store, and it has not been shared by other user or from any other source.

Only play store download