Overview

Mobile security, is the protection of smartphones, tablets, from cyber threats associated with wireless or wifi computing, since it involves personal and business information stored in smartphones as any breach in mobile security can not only give hackers access to our personal life information in real-time but also disclose data like our current location, banking information and much more.

On the other hand Web security more commonly known as “Cybersecurity” basically means protecting a website or web application by detecting, preventing and responding to cyber threats

Mobile and Web Security (Workshop Content)

1. Mobile Security Mob Pen testing:

• Installation of MobSF Tools,
• Installation of Gene motion, and configuration of virtual mobile.
• Downloading & Installation of Mobile Security Framework. 
• Then downloading of any APK (whatsApp) file from Google.
• Apk file Loading & Scanning
• Setting of Proxy Server with browser
• Signer Certificate, to generate Signer APK.
• Manifest Analysis (To find the Vulnerability)
• Code Analysis
• File Analysis
• Analysis of Malware which the Apk file contains,

2. Digital Forensic:

• Digital Evidence Imaging using FTK imager, Use of Write Blocker for Data protection and Integrity
• Information Gathering using OSINT: Maltego, Recon Durbuster, Shodan.io,

3. Web Application Security:

Different types of Web Application:

a)      Black Box Testing

b)     Grey Box Testing

c)      White Box Testing

• Configuration of Browser with BurpSuit
• Installation of CA Certification
• Owasp Top 10 Understanding.
• Finding of Severity Vulnerabilities on the Website such as jQuery & Lodash etc.
• Finding of Critical Vulnerabilities on the Website such as Authentication Login Bypass.
• CVSS v3.1 Base Score Calculator.
• Addition of Wappalyzer Extention to know what a website is built with.
• Inspect web element in Chrome to analyse Developer tools including the editor, Console, Sources, Network, Memory, Application and other tools.
• FoxyProxy Extension to intercept with BurpSuit software.

Prizes