Advanced Android & iOS Hands-on Exploitation by Attify is a practical lab-focused training class that teaches you the tools and tactics to identify and exploit vulnerabilities in modern Android and iOS applications. Students get to learn a step-by-step proven approach of how to dissect, analyze, and exploit mobile applications. This class is a 2021 version of a class that we teach many times a year since 2013. We keep the contents updated by creating relevant labs of vulnerabilities that we see in the wild or are common occurrence in our engagements.
The class is split in two sections: Android and iOS. And for both the sections, we start with the underlying foundations and gradually build a firm and solid understanding of the platform that we are working with. We use an approach of learning-by-doing i.e. all the concepts are accompanied by a demonstration or a lab to understand two things: a) what happens on the surface and b) what happens behind the scenes. Throughout the class, the instructor helps you see a scenario from different perspectives, thus enabling you to develop skills such as pattern-recognition and intuitiveness with which you could discover vulnerabilities faster and better.
During the 3 days, you’ll work with various tools and techniques to reverse, analyze and exploit applications of all different types. Some topics that you’ll learn include: Tracing data flow, Transit Data Analysis, Assessing Data Handling, IPC component vulnerabilities, Webviews , Exploiting Deep Links, Backdooring and Binary Reversing, Native component analysis, Dynamic instrumentation, Debugging etc. For the targets, you will use both real-world and custom-built vulnerable apps.
In the last few hours of the class, we will cover: Future Direction and Research possibilities to show you how you could use this knowledge and skillset in different ways. Apart from it being a standalone technical training class, students often use the momentum that they gain with the class to accelerate their careers.
Either you are looking to get your hands dirty for the very first time or you want to sharpen your mobile pentesting skills, this class is well-suited for both.