SEC575: iOS and Android Application Security Analysis and Penetration Testing - Live Online
Every employee carries an attack surface that leaves the building each evening, connects to networks nobody vetted, and holds credentials to systems the security team is accountable for. Very few organizations have anyone who can assess it properly.
SEC575 builds that capability over six days of live, virtual instruction. You work in Corellium, running virtualized iOS and Android devices with full root access on current OS versions, straight from the browser. No hunting for a jailbreakable handset on an auction site. The week covers platform internals, static and dynamic analysis, and the back-end infrastructure the apps talk to.
During the Week, You'll Work Through:
- 20 hands-on labs in the Corellium platform
- A Capture the Flag event across multiple applications and forensic images
- Application data storage and inter-app communication analysis on both platforms
- Decompilation, iOS encryption bypass, and obfuscated application reversing
- Frida and Objection method hooking, keychain extraction, and runtime manipulation
- Man-in-the-middle attacks, SSL pinning bypass, and mobile phishing scenarios
Communicating What You Find
Finding a flaw is half the engagement. SEC575 spends real time on characterizing mobile risk using OWASP MASVS, so the report drives a fix instead of sitting in a backlog. 36 CPE credits, aligned to the GIAC Mobile Device Security Analyst (GMOB) certification.
Who Should Take This Course?
Penetration testers and ethical hackers adding mobile to their range, auditors who need technical depth, security staff responsible for assessing or deploying phones and tablets, and administrators supporting mobile fleets. Experience with any programming language and basic Linux terminal comfort are recommended.
