Wireless & Mobile Hacking

Module 1: Wireless Networking Fundamentals

• IEEE 802.11 standards: 802.11a/b/g/n/ac/ax
• Wireless architecture: AP, BSS, ESS, SSID
• Frequency bands: 2.4 GHz vs. 5 GHz vs. 6 GHz
• Monitor mode and packet injection
• Wireless adapter selection for testing (Alfa cards)

Module 2: Wireless Security Protocols

• WEP: Weaknesses and crack techniques
• WPA-TKIP vulnerabilities
• WPA2-CCMP/AES: Security and weaknesses
• WPA3: SAE and OWE improvements
• 802.1X and EAP methods: PEAP, EAP-TLS, EAP-TTLS

Module 3: WPA2 PSK Cracking

• 4-way handshake capture with Aircrack-ng
• PMKID attack: Hcxdumptool and hashcat
• Dictionary attacks with wordlists (RockYou, custom)
• Rule-based cracking with Hashcat
• GPU-accelerated cracking

Module 4: WPA2 Enterprise Attacks

• 802.1X architecture and attack surface
• PEAP downgrade with hostapd-wpe
• Certificate validation bypass
• MSCHAPv2 cracking with asleap
• EAP-TLS attack vectors

Module 5: Rogue Access Point Attacks

• Evil twin attack setup with hostapd
• Karma attack for SSID probing
• Captive portal phishing
• MITM with rogue AP and Bettercap
• Detecting evil twin attacks

Module 6: Bluetooth and BLE Hacking

• Bluetooth protocol stack
• Bluetooth Classic attacks: BlueSnarfing, BlueJacking
• BLE (Bluetooth Low Energy) enumeration: Gatttool, Bettercap
• BLE MITM and replay attacks
• IoT Bluetooth security assessment

Module 7: Mobile Hacking Fundamentals

• Android vs. iOS security architecture
• Mobile attack surface: Apps, network, storage, IPC
• OWASP Mobile Top 10
• Setting up mobile testing lab: Genymotion, Corellium
• ADB (Android Debug Bridge) for testing

Module 8: Android Application Security Testing

• APK reverse engineering: JADX, apktool
• Static analysis with MobSF
• Dynamic analysis: Frida, Objection
• Sensitive data storage: SQLite, SharedPreferences, logs
• Intent injection and exported component abuse

Module 9: iOS Application Security Testing

• iOS app structure: IPA files, plist
• Jailbreaking for testing: Checkra1n, Palera1n
• Frida on iOS: Runtime manipulation
• SSL pinning bypass on iOS
• Keychain and data protection analysis

Module 10: Mobile Network and API Testing

• Intercepting mobile traffic with Burp Suite
• Certificate pinning bypass: Frida, apk-mitm
• Mobile API security testing
• OAuth and token handling in mobile apps
• Insecure communication and cleartext data

Module 11: Mobile Malware Analysis

• Android malware characteristics
• Static malware analysis with MobSF
• Dynamic malware analysis in Android sandbox
• Stalkerware and spyware detection
• iOS malware and profile abuse

Module 12: Capstone Projects

• Full wireless pentest of a simulated corporate network
• Android app VAPT of a sample banking app
• iOS app security testing walkthrough
• Wireless/mobile pentest report writing
• Certification preparation: OSWP, eMAPT, CEH

Experience in the Industry Learn from wireless and mobile security specialists with professional experience in Wi-Fi penetration testing and mobile application security assessments.

Backgrounds at the Top Our instructors have conducted wireless and mobile security engagements for telecom companies, banks, and enterprise clients, with recognised expertise in WPA2 enterprise attacks and mobile app VAPT.

Clear & Effective Teaching Wireless protocols and mobile security concepts are taught from the ground up, with clear attack demonstrations and equally clear defensive guidance.

Hands-On Learning Focus Students crack WPA2 handshakes, set up evil twins, reverse-engineer Android APKs, bypass SSL pinning with Frida, and complete full mobile application security assessments.

Up-to-Date Knowledge Instructors stay current with WPA3 attack research, Android 14 and iOS 17 security changes, updated OWASP Mobile Top 10, and new Frida instrumentation techniques.