Android and iOS application testing — APK reverse engineering, traffic interception, SSL pinning bypass, Frida instrumentation and reporting.
A focused, tool-heavy programme built around the OWASP Mobile Top 10 and a lab you set up yourself on emulators.
You start with Android and iOS security architecture, then take applications apart: decompiling APKs, reading the manifest and source, auditing insecure local storage, and pulling hardcoded credentials and API keys that should never have shipped.
The dynamic half covers runtime inspection, intercepting mobile traffic through Burp Suite, SSL pinning and root/jailbreak detection bypass, Frida instrumentation, mobile API and endpoint testing, and insecure IPC and component hijacking — closing with a written mobile security assessment.
Send us your background and we will confirm the next batch date, the schedule and what you need to bring.