Insecure Data Storage - Local Databases

Shared Preferences

Store private primitive data in key-value pairs.

Internal Storage

Store private data on the device memory.

External Storage

Store public data on the shared external storage.

SQLite Databases

Store structured data in a private database.

Network Connection

Store data on the web with your own network server.

Insecure Local Storage - Shared Preferences

Secret tokens found hard-coded

Android Pentesting tutorial - DIVA 1 - Insecure Logging

"  Damn Insecure and vulnerable App  " that you can download on github.
https://github.com/payatu/diva-android

The first vulnerability of this application is called "Insecure Logging",

C:\Program Files\Genymobile\Genymotion\tools>adb devices

List of devices attached

192.168.97.101:5555     device

C:\Program Files\Genymobile\Genymotion\tools>adb shell

root@mobsec:/ # ps | grep diva

u0_a19    2137  172   573652 49260 ffffffff b774807b S jakhar.aseem.diva

root@mobsec:/ # logcat | grep 2137