OWASP Mobile Security Testing Training in Kathmandu

OWASP Mobile Security Testing Training in Kathmandu, Nepal

https://owasp.org/

Enroll Now

OWASP Mobile Security Testing Training is a professional training program delivered by ProgNXT in Kathmandu, Nepal. ProgNXT, a globally recognized corporate training provider in 55+ countries, offers this OWASP Mobile Security Testing Training course with hands-on, instructor-led sessions. This course introduces participants to OWASP Mobile Security Testing Guide (MSTG) and OWASP Mobile Application Security Verification Standard (MASVS)...

Expert Panel

Designed and delivered by the ProgNXT Cyber Security Expert Panel — a vetted team of industry professionals with 17+ years of hands-on experience in ethical hacking, penetration testing, Kali Linux, and network security

ProgNXT Cyber Security Expert Panel

Course Code: YRO98
21 Hrs
Last Updated: April 2026

Course Rating5/5

This course introduces participants to OWASP Mobile Security Testing Guide (MSTG) and OWASP Mobile Application Security Verification Standard (MASVS) frameworks. It provides hands-on training on identifying, testing, and mitigating security vulnerabilities in Android and iOS applications. Through real-world examples, labs, and case studies, participants will gain the skills to perform mobile penetration testing, secure coding reviews, and risk assessments aligned with OWASP standards.

Welcome to the official OWASP Mobile Security Testing Training certification program in Kathmandu, Nepal. This comprehensive training is designed to elevate your professional skills and provide you with practical, industry-relevant knowledge locally. As a globally recognized corporate training provider operating in 55+ countries, ProgNXT ensures that our curriculum meets the highest standards of excellence.

Whether you are looking to upskill your team or advance your personal career, our expert-led sessions will guide you through the core concepts of this domain. Upon successful completion of the 21 Hrs program, participants will receive a globally accepted certification, demonstrating their proficiency and readiness to tackle complex challenges in the field.

Basic understanding of mobile application development (Android/iOS).
Familiarity with networking, HTTP/HTTPS, APIs.
Knowledge of security concepts (encryption, authentication, OWASP Top 10) is recommended.
Prior experience with penetration testing tools (Burp Suite, adb, Xcode) is useful but not mandatory.

By the end of the training, participants will be able to:

Understand OWASP MASVS and MSTG standards for mobile security.
Perform static and dynamic analysis of mobile applications.
Identify and exploit common vulnerabilities in Android and iOS apps.
Secure applications against OWASP Mobile Top 10 threats.
Apply best practices for secure coding, testing, and deployment.
Generate professional mobile application penetration testing reports.

Mobile application penetration testing.
Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
API and backend security assessment for mobile apps.
Secure coding validation against OWASP MASVS.
Hands-on usage of tools.
Exploiting and mitigating vulnerabilities: insecure storage, reverse engineering, improper authentication, SSL/TLS misconfigurations.

Static and dynamic analysis methods.
Identifying OWASP Mobile Top 10 vulnerabilities.
Exploiting insecure authentication/session management.
Secure coding validation against MASVS.
Reporting vulnerabilities in line with industry standards.

Participants who attend all sessions and successfully complete the course assessments will receive a ProgNXT Certificate of Completion.

Foundations of Mobile Security Testing

Introduction to Mobile Security
- Mobile ecosystem, threat landscape
- OWASP MASVS and MSTG overview
- Mobile App attack surface
Mobile Security Testing Environment Setup
- Android & iOS lab setup (emulators, devices, proxies)
- Installing and configuring tools (MobSF, Burp Suite, Frida, Drozer)
Static Analysis (SAST)
- Reverse engineering APK/IPA files
- Decompiled code review (JADX, Ghidra, Hopper)
- Identifying hardcoded secrets, API keys, insecure configurations

Dynamic & Runtime Testing

Dynamic Analysis (DAST)
- Setting up proxy-based testing
- Testing authentication & session management flaws
- Testing API calls, encryption, SSL/TLS security
Runtime Analysis & Instrumentation
- Debugging and hooking with Frida/objection
- Bypassing root/jailbreak detection
- Exploiting insecure data storage
OWASP Mobile Top 10 Vulnerabilities
- Insecure data storage
- Insufficient cryptography
- Insecure communication
- Code tampering & reverse engineering

Advanced Testing & Reporting

iOS Security Testing
- IPA extraction, jailbreak techniques
- iOS-specific attack vectors
Advanced Mobile Exploitation
- Runtime manipulation
- Business logic flaws
- Exploiting hybrid mobile apps
Secure Development & Mitigation
- MASVS controls for Android/iOS
- Secure coding practices
Reporting & Remediation
- Writing a professional penetration test report
- Mapping findings to OWASP MASVS/MSTG

Hands-on Exercises

Summary and Conclusion

Official OWASP MSTG & MASVS documentation.
Slide deck & case study handouts.
Pre-configured lab environment.
Sample vulnerable apps for practice.

Quizzes
Lab-based assessments

ProgNXT Certificate of Completion will be awarded to participants who attend all sessions and successfully complete the course assessments.

OWASP Mobile Security Testing Training Events in kathmandu

Online Events

Global Region	Location	Start Date	End Date	Action
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌

More Upcoming Session Dates

November 2026

🌐 Online Instructor-Led

8th Nov 2026→10th Nov 2026

📍 Kathmandu, Nepal

12th Nov 2026→14th Nov 2026

📍 Kathmandu, Nepal

19th Nov 2026→21st Nov 2026

🌐 Online Instructor-Led

19th Nov 2026→21st Nov 2026

December 2026

🌐 Online Instructor-Led

5th Dec 2026→7th Dec 2026

📍 Kathmandu, Nepal

9th Dec 2026→11th Dec 2026

📍 Kathmandu, Nepal

24th Dec 2026→26th Dec 2026

🌐 Online Instructor-Led

24th Dec 2026→26th Dec 2026

January 2027

📍 Kathmandu, Nepal

4th Jan 2027→6th Jan 2027

🌐 Online Instructor-Led

12th Jan 2027→14th Jan 2027

📍 Kathmandu, Nepal

27th Jan 2027→29th Jan 2027

🌐 Online Instructor-Led

27th Jan 2027→29th Jan 2027

Events for other courses in Kathmandu, Nepal

Global Region	Course Name	Start Date	End Date	Action
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌

OWASP Mobile Security Testing Training in Kathmandu