Null offensive hacking hands-on training.

Proposed sessions for this event:

• Android "Fight Club" : In pursuit of APPiness by Abhinav Mishra
• Android "Fight Club" : In pursuit of APPiness by Abhinav Mishra

There are two mandatory steps of registration:
1. Register here on the portal
2. Fill out the google form here - https://docs.google.com/forms/d/1D5KyVUsXmYjEUj8NI7tB9cft2zBl4gvLtkAssxJBwog/viewform

Note - Those who will not fill out the google form will not be considered for participation

Selected participants will be notified via email by 27th April, 2016

Agenda:

1. Basics of android and android applications

2. Privilege and permission in android

3. Let's get friendly

4. Building the virtual machine/environment

• Installing AppUse/Droider
• Android Studio
• Genymotion
• All other small and big tools

5. Static Analysis of the application

• APK DE-compilation
• Jar, DEX, SMALI ...
• Finding what you are looking for
• SSL Pinning and bypass
• Recompiling the apk
• Insecure Storage

6. Dynamic analysis of the application

• Exported components and issues
• What to do with a broadcast?
• Capturing the application traffic
• Finding new scope and getting ahead of masses
• Web related vulnerabilities
• Session manipulation
• Drozer and its power
• Run time execution

7. Most common mobile vulnerabilities and how to find them

8. Earning money, the cool way

Prerequisites:

• Great sense of humor
• Lack of shyness while asking questions
• Love towards application security
• Movie buff
• Basics of android security
• Laptop: 8GB RAM, 50 GB free HDD, Android Mobile/Tab