.

Mobile Devices Penetration Testing

<<

satyr

User avatar

Newbie
Newbie

Posts: 41

Joined: Wed Aug 11, 2010 6:15 am

Post Tue Aug 17, 2010 5:22 am

Mobile Devices Penetration Testing

any pointers on how to do a penetration testing for mobile devices ?

what sorts of things need to be considered security of mobile applications ?

also is there a guidelines for developing secure applications for mobile devices ?

any help in this regards is highly appreciated
<<

Jhaddix

User avatar

Sr. Member
Sr. Member

Posts: 317

Joined: Wed Oct 29, 2008 10:25 pm

Post Sat Aug 28, 2010 6:01 am

Re: Mobile Devices Penetration Testing

There was a really good presentation at Bsides by one of the Intrepidis guys on this. He attacked the protocols, auth mechanisms, and other aspects using a variety of MiTM attacks... Ill see if i can dig it up.

Mallory is gonna be sweet for this.
<<

satyr

User avatar

Newbie
Newbie

Posts: 41

Joined: Wed Aug 11, 2010 6:15 am

Post Thu Sep 23, 2010 12:46 am

Re: Mobile Devices Penetration Testing

thanks :)

kindly share any information you have on this topic as it would be really helpful
<<

philocipher

Newbie
Newbie

Posts: 1

Joined: Mon Aug 23, 2010 2:23 am

Post Fri Nov 12, 2010 11:51 pm

Re: Mobile Devices Penetration Testing

From what i know it seems like the easiest way to Pen Test a Cell phone or other mobile device is through blue-tooth hacking. I've read stuff about cloning cell phones as well but idk if that falls under the same category.
<<

Brian Cowen

User avatar

Newbie
Newbie

Posts: 4

Joined: Mon Nov 29, 2010 5:08 am

Location: USA

Post Mon Nov 29, 2010 5:18 am

Re: Mobile Devices Penetration Testing

Hello guys....!
Thank you for your useful information.I like this kind of post which tell us much wander full massage. ...!
<<

Darktaurus

User avatar

Full Member
Full Member

Posts: 181

Joined: Thu Sep 03, 2009 8:48 am

Post Mon Nov 29, 2010 3:07 pm

Re: Mobile Devices Penetration Testing

Hey guys,

I was just wondering, what are people here telling their customers after a pentest of mobile devices?  Should they disable bluetooth all together?  Create complicated 5 pin codes?  Encrypt them if applicable? Add antivirus where applicable?  It just seems like there are so many attack vectors with the mobile devices, it would be hard to nail down a secure way for all customers to use them 24-7.  Not to mention, the browser being vulnerable.  Just curious since I see so many companies now going to IPhones, Ipads, and Androids.  Thanks.
OSCE, OSCP, OSWP, CISSP, GPEN

www.agoonie.com
<<

T_Bone

Full Member
Full Member

Posts: 199

Joined: Sat Feb 21, 2009 7:11 am

Post Thu Oct 06, 2011 5:37 pm

Re: Mobile Devices Penetration Testing

<<

magnologan

User avatar

Newbie
Newbie

Posts: 4

Joined: Wed Oct 26, 2011 12:26 pm

Post Thu Oct 27, 2011 1:11 pm

Re: Mobile Devices Penetration Testing


Return to Mobile

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software