Path 13: Mobile App Security — KashSec Academy

Android & iOS security from the ground up — APK analysis, insecure storage, traffic interception, certificate pinning bypass, and exported component vulnerabilities. 18 free lessons, intermediate→advanced level, starting with "Mobile Security Fundamentals"

Level: Intermediate→Advanced · 18 lessons · Free, no account needed.

Lessons in this path

  1. Mobile Security Fundamentals — Sandboxing, permissions, and how Android/iOS differ.
  2. Android Permissions Deep Dive — Runtime permissions, protection levels, and the over-permissioned-app red flag.
  3. Setting Up a Mobile Testing Lab — Emulator, ADB, Burp, and root access — all wired together.
  4. OWASP Mobile Top 10 — The shared checklist for mobile application security.
  5. Android APK Analysis — Decompile and read an app's code without ever running it.
  6. Reverse Engineering Mobile Apps — Static and dynamic analysis together, and a first real look at Frida.
  7. Insecure Data Storage — The most common real-world mobile finding, hands-on.
  8. Mobile Authentication & Biometrics — The secure enclave, and why Face ID doesn't work the way most people assume.
  9. Intercepting Mobile Traffic — Certificate pinning, and bypassing it with Frida.
  10. Mobile API Security — Every Path 11/21 vulnerability class, reached through a mobile app's traffic instead of a browser.
  11. iOS App Security Basics — IPA structure, ATS, and the Keychain.
  12. Cross-Platform Mobile Security — React Native's bridge, Flutter's tradeoffs, and what stays the same either way.
  13. Mobile Privilege Escalation & Root Detection — Root/jailbreak detection bypass and exported component attacks.
  14. Mobile App Hardening — Obfuscation, anti-tampering, and anti-Frida — real protection with real, honest limits.
  15. Mobile Malware & App Store Security — How malicious apps actually reach users despite official review.
  16. Mobile Device Management (MDM) — Containerization, BYOD, and enforcing security policy across a whole device fleet.
  17. Mobile Security Careers & Certifications — GMOB, eMAPT, and why mobile is a genuine specialization, not a universal baseline.
  18. Mobile Security Capstone Lab — A full assessment against a real vulnerable app.