The motivation behind this blog is to consolidate and share my ongoing learning journey in mobile application security, specifically from a red team perspective. Throughout my exploration of Android and iOS security, I've encountered numerous resources. While some are excellent, many only scratch the surface of what can be achieved or how to execute certain techniques effectively. This blog aims to fill that gap by compiling my discoveries, insights, and practical experiences into a single, comprehensive resource. By documenting and sharing my findings, I aim to contribute to the community and assist others in navigating the complexities of mobile application security testing and exploitation.
- 8ksec
- Android Hack - Black Belt Edition
- Android App Reverse Engineering 101
- Android Offensive Security Blog
- Azeria Labs
- Blaze
- HighAltitudesHack
- Intro To Mobile Pentesting
- Inversecos
- IOS Explotation/Security Research
- IOS Reversing & Explotation ARM64
- Mobile Hacking Lab
- OWASP Mobile Application Security
- OWASP Mobile Application Security Checklist
- OWASP MASTG - Mobile Application Security Testing Guide
- OWASP MASVS - Mobile Application Security Verification Standard
- OWASP MASWE - Mobile Application Security Weakness Enumeration
- OWASP Mobile Top 10
- The Mobile Attack Surface