We teach following technical and business logic issues related to mobile application on the different mobile platforms such as android,IOS and windows.<\/p>\n\n\n\n
| Jailbreak Warning\n Checks<\/td><\/tr> |
| Certificate Pinning Checks<\/td><\/tr> |
| Dangerous\n enabled settings(debug mod etc)<\/td><\/tr> |
| Decompile\/Reversing tests<\/td><\/tr> |
| Hardcoded Passwords checks in the sources<\/td><\/tr> |
| Token, 3rd party data leakage checks in\n the sources<\/td><\/tr> |
| Information leakage in the real time\n device logs<\/td><\/tr> |
| Application logs checks if there is\n critical information<\/td><\/tr> |
| Application’s stored cache data checks<\/td><\/tr> |
| Password protection situation of the\n local databases<\/td><\/tr> |
| Sensitive information storing situation\n of the databases<\/td><\/tr> |
| Checks all critical files(xml,plist etc)<\/td><\/tr> |
| Run time tests<\/td><\/tr> |
| Memory analyse in the run time<\/td><\/tr> |
| Certificate Pinning Bypass<\/td><\/tr> |
| Situation of the keyboard cache in the\n text inputs<\/td><\/tr> |
| Data storage shared sdcard<\/td><\/tr> |
| Tcpdump analysis whilst app is working<\/td><\/tr> |
| All backup file, logs and spesific files\n analysis<\/td><\/tr> |
| Sensitive strings search with grep in the\n whole app directory<\/td><\/tr> |
| Mobile app recompile tests<\/td><\/tr> |
| Android APK obfuscation sitiation <\/td><\/tr> |
| Input manipulation tests<\/td><\/tr> |
| 2-factor auth tests<\/td><\/tr> |
| Data transmission security between device\n and server<\/td><\/tr> |
| Server side tests<\/td><\/tr> |
| Full port scan for server IP address<\/td><\/tr> |
| Full vulnerability scanning for server IP\n address<\/td><\/tr> |
| Mobile web site tests like a website test<\/td><\/tr> |
| Testing app permissions<\/td><\/tr> |
| Testing critical information in the\n clipboard<\/td><\/tr> |
| Application Session Timeout situation.<\/td><\/tr> |
| Username and password policy check<\/td><\/tr> |
| Predictable credentials checks<\/td><\/tr> |
| Login form captcha, anti-csrf usage\n situation<\/td><\/tr> |
| Business logic vulnerabilities on the\n application functions<\/td><\/tr> |
| Code injection tests<\/td><\/tr> |
| Command execution tests<\/td><\/tr> |
| Iframe injection<\/td><\/tr> |
| LFI\/RFI Tests<\/td><\/tr> |
| LFI via iframe injections on the device<\/td><\/tr> |
| XSS tests(Reflected,Dom,Stored,Blind)<\/td><\/tr> |
| XSS tests with payload injections via\n cross paltforms(mobile-web)<\/td><\/tr> |
| XXE vulnerability checks<\/td><\/tr> |
| Technical and business logic tests on the\n registration form<\/td><\/tr> |
| Password reset function tests<\/td><\/tr> |
| Access via web browser to mobile app with\n useragent changing<\/td><\/tr> |
| Takeover account tests<\/td><\/tr> |
| Deployment and configuration issues<\/td><\/tr> |
| Mobile API and webservices tests<\/td><\/tr> |
| SSRF Tests(local and remote)<\/td><\/tr> |
| Insecure Direct Object Reference Tests<\/td><\/tr> |
| Privilege Escalation with diffrent roles<\/td><\/tr> |
| Directory traversal<\/td><\/tr> |
| Advenced authorization and authentication\n tests<\/td><\/tr> |
| Username enumeration wia warnin messages\n or mis-developments<\/td><\/tr> |
| Automate Scanning<\/td><\/tr><\/tbody><\/table>\n","protected":false},"excerpt":{"rendered":" We teach following technical and business logic issues related to mobile application on the different mobile platforms such as android,IOS and windows. Jailbreak Warning Checks Certificate Pinning Checks Dangerous enabled settings(debug mod etc) Decompile\/Reversing tests Hardcoded Passwords checks in the sources Token, 3rd party data leakage checks in the sources Information leakage in the real […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-327","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/pages\/327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/comments?post=327"}],"version-history":[{"count":1,"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/pages\/327\/revisions"}],"predecessor-version":[{"id":328,"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/pages\/327\/revisions\/328"}],"wp:attachment":[{"href":"https:\/\/www.ebruu.com\/index.php\/wp-json\/wp\/v2\/media?parent=327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}} |