null Mumbai Puliya 27 January 2018 Mobile Security part-2 (iOS Pentesting) Register

n|u Puliya, really short courses for skill bridging.

Puliya means culvert or a small bridge in Hindi.

We have been getting constant feedback about our null Humla and null Bachaav sessions. The feedback is both ways and almost all the champions are of the opinion that there are some essential non-security skills that are sorely lacking in a lot of attendees.

To "bridge" this gap in skills of our members attending the sessions we are starting null Puliya. The idea is to bridge the skill gap and get our members ready to take on advanced topics covered in null Humla and null Bachaav.

Proposed sessions for this event:

• Mobile Security part-2 (iOS Pentesting). by Romansh Yadav

In this session we will cover the flowing topic.

1. introduction to iOS pentesting.
2. Security architecture of the iOS operating system.
3. Jail-broken detection.
4. exploring cydia, iOS pen-testing tool like Clutch, class-dump-z,gdb, plutil.
5. Owasp top 10 Attack with One practical Demo.

Please note Pre-requisite for the session:
1) Jailbroken iOS device
2) Laptop with internet connection including burp suite(for dynamic pentesting)
3) Install tool in phone
Openssh
Big boss recommended tool
Erica utility
Wget
Unzip
Plutil
Clutch
Otool
Gdb
Cycript
Install vulnerable app
DIVA