Designed for both beginners and advanced enthusiasts, you'll learn how to reverse engineer and conduct thorough security audits of iOS and Android applications. You'll get a deeper insight into common bug categories, and detailed walkthroughs on how to exploit them. Learn how tools like Ghidra, Frida, LLDB, and more can be used to assist you during Mobile application assessments, or research.
Target audienceThis course is for penetration testers, mobile developers or anyone keen to learn mobile application security. It’s also ideal for security enthusiasts who want to explore mobile security concepts, tools, and techniques in greater detail. Level Beginner / Intermediate.
|
|
Prerequisites |
To successfully participate in this course, attendees should possess the following:
Course content:
01 Course Preview
02 Welcome to the Course
03 Setting up the iOS Testing Environment
04 Intro to iOS Apps
05 Debugging iOS Apps
06 Introduction to iOS Reverse Engineering
07 iOS App Containers and Data Analysis
08 iOS App Sideloading and Entitlements
09 Apple's Enhanced Security for iOS Apps
10 Introduction to Frida
11 Frida Labs and Hands-On Solutions
12 Advanced Frida Tracing in IM apps
13 iOS Side Channel Attacks
14 Network Traffic Analysis and Interception
15 Analyzing iOS Flutter Apps
16 iOS Jailbreak Detection and Bypass
17 iOS Broken Cryptography
18 iOS Deep Linking and Web Views
19 Application Patching and Exploitation
20 Automation in iOS Pentesting
21 Anti-Reversing and Anti-Fraud Techniques
22 Intro to Android Security
23 Android OS File System
24 Android Development Support
25 Android Reverse Engineering
26 Exploiting Android Local Storage
27 Exploiting Android Activities
28 Exploiting Content Providers
29 Exploiting Android Insecure Cryptography
30 Frida on Android
31 Root Detection & Bypass in Android
32 Exploiting Android Biometrics
33 Exploiting Android Deep Links
34 Exploiting Android Network Communication
35 Exploiting Cloud Authentication
36 Android Side Channel Attacks
37 Android Debugging
38 Exploiting Android Flutter
39 Securing Android Applications
40 Reverse Engineering and Fuzzing Android Third-Party Libraries
41 Android Permission Model
42 Understanding and Preventing OTP Scams
43 Understanding and Preventing Device Reset Attacks
44 Android Location Privacy & Runtime Attacks
45 Hardware-Assisted Memory Safety for Android Applications
46 AI Driven Reverse Engineering for Applications and Obfuscated Malwares
47 Intercepting and Tampering Network Traffic of Proxy-Unaware Applications
48 Flutter App Reverse Engineering Fundamentals and Exploitation
49 CMSE Mock Exam
50 Certified Mobile Security Engineer (CMSE) Exam
Certification
This course leads to the CMSE (Mobile Security Engineer) certification delivered by 8KSec. The exam is included in the course.
FAQ – Practical Mobile Application Exploitation (On-Demand)
How much does the course cost?
The course costs NOK 16,500 excluding VAT. Norwegian VAT of 25% applies, bringing the total price to NOK 20,625 including VAT. The Certified Mobile Security Engineer (CMSE) certification exam is included.
How is the course delivered?
The course is delivered as self-paced, on-demand e-learning through 8kSec Academy. Participants can access recorded lessons, practical exercises and self-assessments, allowing them to study according to their own schedule.
How long does the course take?
The course includes approximately 30 hours of video content across 170 videos. The estimated completion time is 5–8 months, depending on previous experience and study pace.
How long will I have access to the course?
Participants receive 365 days of access after purchase, providing time to complete lessons, work through practical exercises and prepare for certification.
Who should attend this course?
The course is designed for security professionals, developers and enthusiasts who want to learn how to assess, reverse engineer and secure Android and iOS applications.
What prerequisites are required?
Participants should have a working knowledge of cybersecurity and penetration testing fundamentals, basic familiarity with Android and iOS, Linux command-line skills and an understanding of programming concepts in a language such as Java, Kotlin, Objective-C, Swift, C or C++.
Do I need experience with ARM64 assembly?
Basic knowledge of ARM or AARCH64 assembly is recommended but not required. The course focuses primarily on practical mobile application security testing and reverse engineering.
What will I learn during the course?
You will learn how to analyse, test and secure mobile applications across Android and iOS environments. After completing the course, you will be able to:
Is the course hands-on?
Yes. The training includes practical demonstrations, labs, reverse-engineering exercises, vulnerability assessments and mobile application exploitation scenarios using dedicated testing environments.
Which topics are covered?
The course covers a broad range of mobile application security topics, including:
Does the course cover both Android and iOS?
Yes. The programme includes dedicated training on both platforms, covering application architecture, security mechanisms, reverse engineering, vulnerability testing and practical techniques for identifying weaknesses in mobile applications.
What is the difference between this course and Offensive Mobile Reversing and Exploitation?
Practical Mobile Application Exploitation focuses on security assessments, reverse engineering and vulnerabilities within mobile applications. Offensive Mobile Reversing and Exploitation focuses more deeply on operating system internals, kernel security, low-level vulnerability research and exploitation.
Which tools are used during the course?
The training covers security research and testing tools including Frida, Ghidra, Hopper, LLDB, Apktool, JADX, Android Debug Bridge (ADB), and tools for network analysis, dynamic instrumentation and fuzz testing.
Does the course cover mobile application reverse engineering?
Yes. Reverse engineering is a central part of the programme. Participants explore Android and iOS binaries, analyse application logic, investigate obfuscated code and use static and dynamic analysis techniques to understand application behaviour.
Does the course cover mobile application security testing?
Yes. Participants learn to assess mobile applications for vulnerabilities involving data storage, authentication, cryptography, network communication, application components, permissions and platform-specific security mechanisms.
What equipment do I need?
Participants need a laptop with at least 8 GB RAM, 40 GB of available disk space and administrative access. For iOS labs, a jailbroken device running iOS 16 or later, or a suitable virtualized environment such as Corellium, is required. For Android labs, a rooted device running Android 12 or later, or a suitable emulator or virtualized environment, is required.
What language is the course delivered in?
The video instruction is in English. Subtitles are available in English, German, Spanish, French, Arabic and Japanese.
Does the course prepare me for certification?
Yes. The course prepares participants for the Certified Mobile Security Engineer (CMSE) certification from 8kSec Academy. The certification validates practical skills in mobile application security, vulnerability analysis and security research.
Is the certification exam included?
Yes. One attempt at the Certified Mobile Security Engineer (CMSE) certification exam is included in the course price.
How is the certification exam structured?
The CMSE certification exam is a 48-hour practical assessment designed to evaluate mobile application security knowledge and hands-on testing skills. Participants must successfully complete the exam to earn the certification.
Will I receive a certificate of completion?
Yes. Participants receive a certificate of course completion. The CMSE certification is awarded separately after successfully passing the certification exam.
Can the course be purchased for a team or organisation?
Yes. Group enrolment is available for organisations wishing to train multiple employees. The training provider offers group pricing and optional learner progress tracking for larger teams.
What makes this course valuable?
The course provides practical, in-depth training across the mobile application security lifecycle. Participants learn to identify vulnerabilities, understand application behaviour through reverse engineering, perform security assessments and implement effective protection measures for Android and iOS applications.
