OnDemand Training - Best Special Offers of the Year Ending Soon - Learn More

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

Tech Tuesday Workshop - Rooting Android and Jailbreaking iOS for Mobile Security Assessments

  • Tuesday, July 07, 2020 at 1:00 PM EST (2020-07-07 17:00:00 UTC)
  • Raul Siles

You can now attend the webcast using your mobile device!

  

Overview

The SANS "SEC575: Mobile Device Security and Ethical Hacking" training highlights how gaining privileged access to a mobile device is often needed, and highly recommended, to perform in-depth low level mobile security assessments. All popular mobile devices come with default restrictions that limit the activities required by security analysts to research and assess the security of the mobile operating system and mobile apps.

In this hands-on workshop we will take a practical look at some of the most common steps required to root an Android and jailbreak an iOS mobile device, using modern versions of both mobile operating systems. The workshop goal is to end up rooting or jailbreaking your testing mobile devices, but you need to accept the challenge of overcoming all the pre-requisites, steps and difficulties that might be encountered in this process. Attendees are required to have an inquisitive soul, do not fear setbacks, and be very eager to learn... ;-)

System Requirements: The workshop will be mainly delivered using Windows 10 as the platform of reference, to reach a larger audience (although using a macOS system is also an option, but with limited support during the workshop). Attendees must have administrative access to their computers to be able to install new applications and tools.

Having Internet access during the workshop is mandatory.  A Wi-Fi network (with Internet access) shared between the Windows (or macOS/Linux) computer and the testing mobile devices is required.

To benefit as much as possible from the hands-on workshop activities, attendees should have at least one Apple iOS/iPadOS testing mobile device (for the jailbreak section), and/or one Android testing mobile device (for the rooting section), preferably Google Nexus or Pixel devices. Do not use your production mobile devices for the workshop!!

The iOS/iPadOS device (iPhone or iPad) must run a OS version up to 13.5 for unc0ver - https://unc0ver.dev - (or alternatively, a mobile device model supported by checkra1n - https://checkra.in - can be used, although this will require using macOS or Linux, again with limited support during the workshop).

The iOS jailbreak process requires a (disposable) Apple ID, so you need to create an Apple account in advance - https://appleid.apple.com/account.

The Android device should run a modern version of Android, preferably 7, 8 or 9, rather than Android 10, as there are current limitations in custom recovery images for Android 10 (if Android 10 is used, an alternative rooting method will be required).

Apart from these hardware requirements, you need to be ready to prepare and meet multiple prerequisites (software, tools, etc.) that will be provided early in the workshop.

*Please note that this WILL NOT be recorded.  Due to the nature of these workshops, many have a capacity limit and will not be made available for archive. To help us offer this opportunity to as many people as possible, we are asking that you please only register if you plan to attend live.

Speaker Bio

Raul Siles

Raul Siles is founder and senior security analyst at DinoSec. For over a decade, he has applied his expertise performing advanced technical security services and innovating offensive and defensive solutions for large enterprises and organisations in various industries worldwide. Throughout his career, starting with a strong technical background in networks, systems and applications in mission critical environments, he has worked as an information security expert, engineer, researcher and penetration tester at Hewlett Packard, as an independent consultant, and on his own companies, Taddong and DinoSec.

Raul is a certified instructor for the SANS Institute, regularly teaching penetration testing courses. He is one of the few individuals worldwide who have earned the GIAC Security Expert (GSE) designation, as well as many other certifications. Raul holds a master's degree in computer science from UPM (Spain) and a postgraduate in security and e-commerce. More information at http://www.raulsiles.com (@raulsiles) and http://www.dinosec.com (@dinosec).

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.