Luca is an experienced Penetration Tester and Ethical Hacker with a demonstrated history of working in the information technology and information security industry. Skilled in Web Application and Network Penetration Testing, as well as Social Engineering/Red Teaming attacks simulations. 

Red Team Engagements and The Forgotten Risk of Mobile Devices

During a red team engagement, going after low hanging fruits is the obvious choice – vulnerable web applications, external password spraying and spear phishing are amongst the most popular attacks. However, when everything seems to fail, targeting mobile devices and mobile applications could be a surprising but effective attack vector, due to poor policies around mobiles and the rise of Cloud Mobile Device Management (MDM) solutions. This talk wants to prove that mobile devices are not to be overlooked during an engagement, showing how this vector was used in real world.

Finally, the talk will illustrate how to use malicious orchestration with Frida to move laterally from a mobile device.