Mobile › Module 10 › Lesson 1
Checklist
Topic 27 capstone checklist — mobile mindset, Android/iOS literacy, MASVS, MDM, reporting on $MOB_LAB.
Visual · t27_capstone_checklist
Checklist consolidates mobile security literacy pillars. $MOB_LAB only. Original Cyberlium.
Opening
Capstone proves mobile security literacy on YOUR authorized lab work — not a portfolio of stranger phone exploits.
Assemble checklist covering Modules 1–9: mobile mindset and lab scope, Android architecture and APK/dynamic/network literacy, iOS arch and sandbox/jailbreak implications, MASVS/MASTG verification, secure coding fixes, MDM/BYOD/enterprise controls, reporting hygiene with RoE. Use on capstone walk of YOUR $MOB_LAB — never stranger devices, pinning bypass on unauthorized apps, covert MDM, or fabricated findings. Each row links artifact or honest N/A. Notes chmod 600 under $HOME/cyberlium-lab. Integrity rows: $MOB_LAB only, RoE stated, findings evidenced, limitations documented.
1. Scope and ethics
$MOB_LAB named with RoE reference. NEVER stranger phones, NEVER pinning bypass unauthorized apps, NEVER covert MDM, NEVER fabricated evidence.
Practice label when brief requires — honesty in capstone.
Command guide
Try these commands — Scope and ethics
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
OWASP MASVS — https://mas.owasp.org/MASVS/ OWASP MASTG — https://mas.owasp.org/MASTG/ Android security — https://developer.android.com/privacy-and-security/security-tips Apple Platform Security — https://support.apple.com/guide/security/welcome/web
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export MOB_LAB=${MOB_LAB:-$HOME/cyberlium-lab/t27-mob}
cat > "$MOB_LAB/notes/capstone-checklist.txt" <<'EOF'
[ ] lab.env + apk/ notes/ report/ evidence/ dirs
[ ] roe.txt + no-stranger-phones.txt reviewed
[ ] YOUR demo.apk created + unzip/aapt static review
[ ] jadx + frida version/docs literacy (no bypass scripts)
[ ] adb devices on YOUR emulator only
[ ] openssl s_client to example.com + pinning literacy notes
[ ] iOS sandbox + jailbreak literacy docs curled
[ ] MASVS/MASTG map + finding draft + report template
[ ] MDM/BYOD enterprise notes — no stranger enrollment
[ ] never: unpin/objection/resign piracy/stranger adb
EOFCommand — copy this
grep '\[ \]' "$MOB_LAB/notes/capstone-checklist.txt"
python3 -c "print('Capstone: mobile security literacy — YOUR lab emulator only')"Primary tools to practice this lesson: grep, python3. Reference sites: OWASP MASVS (https://mas.owasp.org/MASVS/); OWASP MASTG (https://mas.owasp.org/MASTG/); Android security (https://developer.android.com/privacy-and-security/security-tips); Apple Platform Security (https://support.apple.com/guide/security/welcome/web). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Literacy pillars
Mindset, Android stack, static/dynamic/TLS, iOS, MASVS/MASTG, MDM enterprise, reporting — linked rows.
Cross-link Topic 26 DFIR only as separate track — do not mix unauthorized dumps into mobile pack.
3. Teardown
Notes secured chmod 600, report pack ready, lab emulator snapshot revert optional per brief.
Archive retention note for mentor handoff.
4. What you ship: Topic 27 capstone checklist
One-page mobile security literacy capstone checklist for $MOB_LAB.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: stranger phones vs lab emulator apps
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Checklist includes row 'jailbreak classmate iPhone for bonus.'
Right
Checklist written. Next: Lab Path.
Mission: write capstone checklist
1) Ethics/scope section. 2) Modules 1–9 pillar rows. 3) Teardown and handoff section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone artifacts?”
Knowledge Check
APPLY: Checklist includes:
Multiple choice
Knowledge Check
APPLY: True or False: Stranger device testing required for capstone.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice