Mobile Pentest
Beginner
Mobile Basics & Static Analysis
Decompile APKs, grep IPAs, find hardcoded keys, understand the app sandbox.
0/4 modules complete · 0%
- 1Quiz+90 XP
Mobile Concepts Quiz: Sandbox, Keychain, Intents & Deep-Links
This quiz validates your understanding of mobile security fundamentals including application sandboxing, secure storage mechanisms, inter-process communication, and deep-link attack surfaces.
open quiz - Hands-on Labeasy+30 XP
APK Decompilation & String Recon
Decompile a sample APK, find the hardcoded API key in the smali, and use it.
complete the module above first - Hands-on Labmedium+110 XP
Box: iOS — Sideloaded Replay
An IPA leaks an embedded refresh-token. Replay it against the API to mint an admin access-token.
complete the module above first - Hands-on Labeasy+30 XP
AndroidManifest Audit
A misconfigured AndroidManifest.xml exports an activity that grants admin via intent extras.
complete the module above first
Sign in to track your progress.
sign in