ABSTRACT

If you are the kind of person who enjoys workshops with practical information that youcan immediately apply when you go back to work, this workshop is for you, all action, nofluff :) Attendants will be provided with training portal access to practice some attack vectors,including multiple mobile app attack surface attacks, deeplinks and mobile app dataexfiltration with XSS. This includes: Lifetime access to a training VM, vulnerable apps topractice, guided exercise PDFs and video recording explaining how to solve theexercises.This workshop is a comprehensive review of interesting security flaws that we havediscovered over the years in many Android and iOS mobile apps:

An entirely practical walkthrough that covers anonymized juicy findings from reports that we could not make public, interesting vulnerabilities in open source apps with strong security requirementssuch as password vaults and privacy browsers, security issues in government-mandatedapps with considerable media coverage such as Smart Sheriff, apps that report humanright abuse where a security flaw could get somebody killed in the real world, and more.

The workshop offers a thorough review of interesting security anti-patterns and how theycould be abused, this is very valuable information for those intending to defend or findvulnerabilities in mobile apps.This workshop is for those who are intending to broaden their knowledge of mobilesecurity with actionable information derived from real-world penetration testing of mobileapps.Please come caffeinated, the audience will be challenged to spot vulnerabilities at anymoment :)