Databases - CraigDonkin/Android-Testing GitHub Wiki

SQLite

  • Used for storing sensitive information
  • /data/data/com.your.app/databases/database
  • Check for sensitive information stored unencrypted
  • Look in Journal files and lock files too
  • Objection can open sqlite databases
  • pull the DB off the device and look in sqlite browsers

SQLCipher

  • Used for password encrypting sqliteDBs
  • Uses 256-bit AES Encryption
    • Look for the password or brute force it
      • source code
      • shared preferences
      • other files

Realm DBs