Abstract

This in-depth and immersive three-day course offers participants an opportunity to gain a deep understanding of iOS and Android platform internals, application security, and exploitation. Thecourse is fast-paced and covers a wide range of topics, including reverse engineering, exploitation techniques, vulnerability analysis, kernel internals, and mitigation strategies.

The masterclass features real-world case studies on exploits, malware, and vulnerability analysis. Participants will learn about the mobile OS security model and exploit mitigations available on these platforms. There will be an in-depth discussion and hands-on labs for ARM64 instruction set, code signing, sandboxing, inter-process communication mechanisms, and advanced techniques to bypass anti-debugging and obfuscation.

This masterclass is designed for security professionals and software engineers who wish to enhance their expertise in mobile security and acquire practical skills to assess, secure, and analyze both iOS and Android platforms. Slides, and detailed documentation on the labs will be provided to the students for practice after the class. Corellium access will be provided to students during the duration of the training course.

Trainer Info

Prateek Gianchandani has more than 10 years of experience in security research and penetration testing. His core focus area is mobile exploitation, reverse engineering, and embedded device security. He is also the author of the open-source vulnerable application named Damn Vulnerable iOS app. He has presented and trained at many international conferences including Defcon, POC, TyphoonCon, Blackhat USA, Brucon, Hack in Paris, Phdays, Appsec USA, etc. In his free time, he blogs at https://highaltitudehacks.com.

Twitter: https://twitter.com/prateekg147
LinkedIn: https://www.linkedin.com/in/prateekgianchandani

Dinesh’s core area of expertise is Mobile and Embedded application pen-testing and exploitation. He has spoken at conferences like Black Hat, Bsides, DefCon, BruCon, AppsecUSA, AppsecEU, HackFest and many more. He maintains an open-source intentionally vulnerable Android application named InsecureBankv2 for use by developers and security enthusiasts. He has also authored the guide to Mitigating Risk in IoT systems which covers techniques on security IoT devices and Hacking iOS Applications which covers all of the known techniques of exploiting iOS applications.

Twitter: https://twitter.com/din3zh
LinkedIn: https://www.linkedin.com/in/dineshshetty1

8ksec is a foremost cyber security research company offering exceptional training and consulting services to aid clients in enhancing their security stance. Our experts possess extensive experience in delivering specialized cybersecurity training and consulting to several commercial and defense organizations across the United States, Europe, and the Middle East and North Africa region