Mobile Application Security Testing Training in Madrid, Spain

This course equips participants with the skills to identify, test, and mitigate security vulnerabilities in Android and iOS applications. It covers mobile app architecture, common attack vectors, OWASP Mobile Top 10 risks, reverse engineering, dynamic/static analysis, and secure coding practices. Hands-on labs with real-world tools will provide practical experience in assessing and securing mobile apps.

1. Introduction to Mobile App Security

   • Mobile app architecture (Android & iOS)

   • Mobile attack surface & OWASP Mobile Top 10 overview

2. Mobile Application Testing Setup

   • Emulators, simulators & rooted/jailbroken devices

   • Tools setup

3. Static Analysis of Mobile Apps

   • Reverse engineering (APKTool, JADX)

   • Identifying hardcoded secrets, API keys, and insecure configurations

4. Dynamic Analysis Basics

   • Runtime analysis & interception with Burp Suite

   • Testing insecure communication & storage

   • Lab: Exploiting insecure data storage

5. Advanced Mobile App Security Testing

   • Authentication & session management flaws

   • Code tampering & repackaging attacks

   • API security & backend testing

   • Lab: Exploiting insecure API endpoints

6. Exploitation with Advanced Tools

   • Using Drozer & Frida for runtime manipulation

   • Bypassing root/jailbreak detection

7. Secure Coding & Mitigation

   • Best practices for Android & iOS developers

   • Secure communication & encryption

Hands-on Exercises

Summary and Conclusion