Section 13: Attacks on Mobile Devices

Question 1

Mobile Deployment Options

Answer 1

o Corporate-Owned, Business Only (COBO)
▪ Purchased by the company for use by the employees only for work related purposes
▪ Most secure
▪ Most restrictive
▪ Most expensive

o Corporate-Owned, Personally-Enabled (COPE)
▪ Provides employees with a company procured device for work-related and/or personal use

o Choose Your Own Device (CYOD)
▪ Allows employees to select a device from an approved list of vendors or devices
o Bring Your Own Device (BYOD)
▪ Allows employees to bring their own devices into work and connect them to the corporate network
▪ BYOD brings up privacy concerns and is the most difficult to secure

o Virtual Mobile Infrastructure (VMI)
▪ Like VDI, but utilizes a virtualized mobile operating system

Question 2

Disassembler

Answer 2

A computer program that translates machine language into assembly language

Question 3

Machine Code

Answer 3

The binary code executed by the processor, typically represented as 2 hex digits for each byte

Question 4

Assembly Code

Answer 4

The native process or instruction set used to implement a program

Question 5

Decompiler

Answer 5

Software that translates a binary or low-level machine language code into higher level code

Question 6

Drozer

Answer 6

A complete security audit and attack framework that provides the tools to use and share public exploits for the Android OS

Question 7

Android APK Decompiler (APKX)

Answer 7

A tool that can extract an APK file, an Android binary, or application back to its Java source code

Question 8

Frida

Answer 8

▪ An open-source tool that provides custom developer tools for
penetration testers when conducting application pentesting on mobile apps
▪ Frida supports both iOS and Android applications, as well as Windows, macOS, and Linux

Question 9

Needle

Answer 9

▪ An open-source, modular framework used to streamline the security assessment process on iOS application
▪ Frida is a better choice for iOS exploitation as Needle has already been decommissioned

Question 10

Ettercap

Answer 10

A comprehensive toolkit for conducting on-path attacks

Question 11

Mobile Security Framework (MobSF)

Answer 11

An automated, all-in-one mobile application pentesting, malware
analysis, and security assessment framework capable of performing both static and dynamic analysis

Question 12

Postman

Answer 12

An API platform for building and using APIs that simplifies each step of the API lifecycle and streamlines collaboration