Services Details

Mobile Application Testing




Mobile application testing measures the security posture of your website and/or custom developed android or IOS application. Moxie Hawk performs full unauthenticated and authenticated testing based on strict OWASP guidelines. Our engineers focus on identifying weak points across the entire application to ensure your applications and data stay safe. Testing activities include hunting OWASP Top 10 Vulnerabilities and enumeration, testing for injection attacks (SQL,, LDAP, etc.), testing for remote code execution, malicious file upload abuse testing, and more.

OUR METHODOLOGY

All testing performed is based on the NIST SP 800-115 Technical Guide to Information Security Testing and Assessment, OWASP Testing Guide (v4), OWASP Top 100 Scenerios, and customized testing frameworks.

  • Discover:Client aims are gathered and rules of engagement are obtained.
  • Analysis:Accomplish scanning and enumeration to identify critical vulnerabilities, weak areas and exploits.
  • Attack:Confirm critical vulnerabilities through exploitation and perform additional impacts over new access.
  • Reporting:Confirm critical vulnerabilities through exploitation and perform additional impacts over new access.