Skip to content

22. Mobile Attacks

22.1 Mobile Spyware

Android: - Pegasus-class spyware (zero-click vulnerability chains) → takeover without any user interaction - Sideload malicious apps / Google Play review bypass - Use Accessibility Service to steal credentials / keylogging - Tools: Frida / Objection / MobSF

iOS: - Commercial spyware such as TriangleDB / Predator - iMessage zero-click (ForcedEntry / BlastDoor bypass) - Post-jailbreak persistence / configuration profile (MDM) abuse - Forensics: iLEAPP / [Cellebrite]

22.2 Mobile Penetration Testing

  • APK decompilation (jadx/Ghidra) → hardcoded API keys / internal addresses
  • SSL Pinning bypass (Frida/Objection)
  • API endpoint testing (test the backend after packet capture)
  • MDM configuration profile phishing