[PUBLICATION] Mobile Hacking CheatSheet

Davy Douhine 25 Aout 2021 Publications

Last year, after noticing that no serious cheatsheet about mobile security was around, we’ve published a first attempt to summarise a few interesting basics info regarding tools and commands needed to assess the security of Android and iOS mobile applications. It seemed well received by the security community and the bug bounty community, in particular despite a few typos. We’ve released a special version for the HITBCyberWeek a few months later, without the typos.

[TRAINING] Mobile Hacking Online - June 2021

Davy Douhine 7 Avril 2021 Training

We are pleased to announce that we are going to give a new session of our Mobile Hacking training in an online form!. Save the date June 21, 22 and 23 2021. Here is the pitch of the training: Guillaume Lopes and Davy Douhine, senior pentesters, will share many techniques, tips and tricks to deliver to pentesters, bug bounty researchers, app makers or just curious a 100% hands-on 3 days mobile training.

[WORKSHOP] BSides Dublin 2021 - Android/iOS Mobile Hacking Workshop

Davy Douhine 30 Mars 2021 Training

This year, RandoriSec had the chance to deliver a mobile hacking workshop at BSides Dublin. The first two hours of the workshop were dedicated to Android and was delivered by Guillaume Lopes. Then, the second part was focused on iOS and was presented by Davy Douhine. We would like to thank the BSides Dublin organizers and all people involved for the awesome event and also the speakers for the great talks.

Formations Mobile Hacking 2020

Davy Douhine 8 Octobre 2020 Conference

Nous intervenons régulièrement lors des conférences internationales et donc en anglais mais nous ne délaissons pas non plus les passionnés français et francophones. ENSEIRB MATMECA Cette année nous sommes fiers d’annoncer que nous allons aider, à notre niveau, à former la nouvelle génération en formant les élèves ingénieurs de l’option “cybeR-sécurité, Systèmes et Réseaux” de l’ENSEIRB-MATMECA (École nationale supérieure d’électronique, informatique, télécommunications, mathématique et mécanique de Bordeaux), (labellisée SecNumEdu par l’ANSSI) aux bases de la sécurité des applications mobiles (Android et iOS).

[CONFERENCE] RandoriSec and friends: Enlarge your toolkit!

Davy Douhine 10 Juin 2020 Conference

Two months ago, we organized a small free online security conference. During this event, 6 talks covering different areas (mobile security, SWIFT CSP, security automation and Incident Response) were delivered. The talks are available in our Youtube channel. The event went pretty well with an average of 30 participants but unfortunately for non french speaking people it was in french… So here we are again but this time all talks will be in english and with some hands on!

[WORKSHOPS] BSides Budapest 2020 - Android and iOS workshops online

Guillaume Lopes 29 Mai 2020 Workshop

Last year, at BSides Budapest, we delivered a workshop about Mobile Hacking on Android and iOS. The idea, we had at this time, was to give a very short introduction of our 3 days training about Mobile Hacking. Note: This training was already delivered at Hack In Paris (2019), at DeepSec (2018 and 2019) and also online (2020). However, we noticed that 2 hours are too short to be able to introduce different concepts in Android and iOS mobile apps…

[TRAINING] Mobile Hacking

Davy Douhine 27 Avril 2020 Training

Security conferences are an excellent way to access top-notch quality trainings but with all this actual mess they are cancelled or postponed. However, life keeps going and we still need to train in order to improve our skills. So, we are pleased to announce that we are going to offer our Mobile Hacking training in an online form! Of course, we prefer to have real interactions with the attendees because we think it’s the best way to give trainings but as nodoby actually knows when this will be possible again, we want to try our best to continue to train whoever wants to learn mobile security.

[CONFERENCE] Conférence en ligne - RandoriSec and friends

Davy Douhine 6 Avril 2020 Conference

Toutes les conférences des semaines passées et à venir étant annulées, nous organisons une conférence en français et en ligne autour de trois thèmes : Sécurité mobile Sécurité bancaire SWIFT Sécurité opérationnelle : PatrOwl et TheHive La conférence s’ouvrira avec un thème que l’on affectionne chez RandoriSec : la sécurité des applications mobiles. Guillaume Lopes nous expliquera, à partir de ses recherches effectuées sur le Google Play Billing, les conditions et le mode opératoire pour contourner les paiements InApp.

Trainings 2020 and COVID-19

Guillaume Lopes 26 Mars 2020 Training

Hello everyone! We hope everything is going well with you regarding the current situation. As you already may notice, many infosec events were cancelled or postponed. In our case, we are not going to be able to deliver our Mobile Hacking course in the following events: BSides Budapest: The event was postponed to May, 28th. However, we are not available at this date and no Mobile Hacking workshop will be delivered.

Trainings 2020 - Schedule

Guillaume Lopes 30 Janvier 2020 Training

First of all, we would like to wish you a happy new year 2020! Wishing you all the best. We have some exciting news regarding our training schedule for this year. Our Mobile Hacking course will be delivered in 3 different infosec conferences! If you want to have a preview of the covered subjects, we are going to tweet #mobile #hacking #tips in February. BSides Budapest - Workshop - March 26 Coming back to BSides Budapest in order to deliver not one but two workshops!

[PUBLICATION] Éprouver la sécurité des applications mobiles

Davy Douhine 30 Octobre 2019 Publications

Guillaume et moi-même avons écrit trois articles sur la sécurité des applications mobiles (tout le dossier en fait ;), qui ont été publiés dans le magazine MISC106 de novembre/décembre : Contournement de l’API Google Play Billing (for fun and profit ;) Auditer la sécurité d’une application iOS (avec et sans jailbreak) Présentation du Mobile Security Testing Guide de l’OWASP (devenu LA référence dans le domaine) Comme à notre habitude nous aurions aimé opter pour une licence CC dans le but de mettre les articles à disposition au plus grand nombre dès l’expiration des droits d’auteur, mais cela n’a été possible que pour un seul des trois articles.

Catégories

Tags