Application Profiling:
• Creating a step-by-step mapping of the application functionality, data-flow, back-end API calls and business logic.
Test Case Generation:
• Creating test-cases of abuse scenarios to identify business logic vulnerabilities in the application flow.
Binary Analysis:
• Reverse Engineering of the binaries for android (.apk) and IOS (.ipa) applications.
Vulnerability analysis:
• Identifying potential vulnerabilities based on data from source code review and dynamic analysis.
Manual business logic testing:
• Performing manual exploitation and testing to identify the exploitable vulnerabilities from the back-end business logic.
Reporting
• Comprehensive report of all security issues within the mobile application ecosystem.