Mobile Application Penitration Testing [MAPT]

• Weekdays - 5 to 6 weeks
• Weekend - 6 to 7 weeks
• FastTrack - 4 to 5 weeks

• Weekdays - 5 to 6 weeks
• Weekend - 6 to 7 weeks
• FastTrack - 4 to 5 weeks

• What is Information Security?
• Hacking Methodologies and Types of security testing
• IP addressing
• Ports and services
• Protocols, TCP/IP and OSI Model
• Proxy and VPN

• Mobile build architecture
• Mobile phone configuration
• Software and applications

• Examine, Build and Debug applications
• Run applications
• Android studio IDE

• Android studio compilation process
• Resources into a working Android applications
• Insight into the protection employed
• Authenticity check
• Security breaching circumstances

• Reversing android applications
• Security Audit of third party applications

• System level access of mobile device
• Importance of rooting in security tests
• Implications of rooting a device

• Basics of mobile applications
• Needs of pentest
• How to execute security test tasks

• How a mobile device uses network?
• Switching between cellular and Wi-Fi networks
• WiFi hotspots
• Faking WiFi networks
• Configuring environment
• Inspect and analyse network traffic

• Securely storing data on mobile device
• Vulnerabilities because of unsecure data
• OWASP

• What is clickjacking attack?
• What is tapjacking attack?
• Clickjacking v/s Tapjacking
• Application to avoid Tapcking

• Programmatically examining application code on disk
• Validating the code
• Security tests on android applications
• Static code analysis

• Review the code for vulnerabilities
• Environments – [Normal | Virtualized | Debugger]
• Observe network requests
• Interaction with other applications
• Results of any error conditions generated

Problem Statement: - Conduct a cyber-threat assessment to identify any possible bypass of security control.

Description: - Attackers uses control bypass methods such as Social Engineering Attacks, NAC bypass methods, DLP control bypass etc. As some cyber-security personnel you need to asses any possible risk, vulnerability assessment and/or penetration testing to identify any possible weakness in policy, procedure & practices.

Problem Statement: - Find out where or How credentials are being stored and vulnerable code

Description: - While one stores any confidential item on his/her device, information security needs to be addressed. If you are storing insecurely i.e poor encryption, as plain text, poorly managed access control then attacker can penetrate into your device. In this project you will find out if any vulnerability present into your data storage area or not.

Problem Statement: - Check if your android device is vulnerable for tapjacking

Description: - With social engineering tricks one can create an app that can trick a user to tap a specifically-crafted app popup window as gateway for varied threats. A tapjack app needs a screen overlay permission to potentially trick you into feeding sensitive data. A malicious app with screen overlay permission could place a fake password input on top of a real login screen tn order to collect your actual password. In this project you need to identify such vulnerability to make a mobile device more secure.