Trainer: Prem Kumar (Aura Security)

Summary: The number of mobile applications available in the Apple App Stores is nearing 2 million and vulnerabilities are skyrocketing. Elimination of such security holes in iOS apps is critical for any developer/pentester, who wants to protect users from attackers. The agenda of this training would be to carry out, In-depth analysis of iOS vulnerabilities and remediation of such security holes.

We will also be looking at various tools and advanced techniques which are helpful for performing a successful mobile penetration test.

Learnings:

• What is iOS?
• Understanding iOS Architecture/Sandboxing
• iOS Application Structure.
• Types of iOS Applications and their distributions.
• Types of iOS Pen-tests.
• What is Jailbreak? Why Jailbreak? Perquisites!
• Setting up basic iOS pen test platform.
• iOS Transport Layer Protection.
• iOS Insecure Local Storage.
• iOS Side Channel Data Leakage.
• iOS Client Side Injections.
• Runtime Analysis.
• Demo of iOS vulnerabilities reported in Bug bounties.
• How To Start on iOS Pentesting?

About Prem: Prem is currently working as a Security Consultant at Aura Security, Wellington. He has profound knowledge in web, mobile, network security and has conducted numerous penetration testings for clients across all verticals. He has previously spoken at Daimler International Security Conference (Germany), Digitalsec2016 (Malaysia), Cyber Security Conclave (SCSC) India, and other security events. In his spare time, he participates in bug bounties and plays Fortnite.