Integrating Mobile Devices into your Penetration Testing Program
summary
Claim: mobile devices become internet‑facing pivot points that bypass perimeter controls. Demonstrated tools and results include Stagefright remote RCE on Android, a malicious IMSI‑catcher/cell tower used to force phones to 2G and intercept/update, and an open‑source Smartphone Pentest Framework (SPF) spun out of a DARPA grant and being productized. Live demo sends a shell from an exploited server through a rogue cell tower to a phone then back to a laptop, proving MDM/EMM controls and mobile antivirus often fail in realistic tests.
AI-written summary · about
chapters (4)
related talks
54mThe Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
49mThe Perimeter Has Been Shattered
48mMobile Device Mismanagement
32mHack Your Own App: Getting Started with Mobile Penetration Testing
01h 01mCellular Exploitation on a Global Scale: The Rise and Fall of the Control Protocol
52mCellular Exploitation on a Global Scale: The Rise and Fall of the Control Protocol
44mExposing Critical Threats In Millions Of Connected Devices
21mWhen Attackers Go Mobile-First: What Developers Need to Know