Mobile › Module 10 › Lesson 3
Evidence Pack
Bundle Topic 27 literacy evidence from $MOB_LAB — MASVS lab, MDM pack, mobile report; no fabrication.
Visual · t27_evidence_pack
Evidence pack = mentor handoff from $MOB_LAB literacy. Original Cyberlium.
Opening
One indexed pack beats scattered APK notes — and never includes bypass recipes or unauthorized app findings.
Assemble evidence pack: $MOB_LAB RoE, lab setup proof, MASVS lab pack, MDM enterprise pack, mobile report lab, iOS literacy rows if brief included, integrity statement (authorized practice only, findings evidenced, no stranger devices, no unauthorized bypass, limitations documented). Directory chmod 600 — index.md lists contents UTC redactions. Mentor copy: report + diagrams + finding table, not live malware on USB. Gap paragraph for Topic 28 Advanced Cryptography — separate authorized track. Scan folder for stranger device refs, bypass cookbooks, covert MDM artifacts — zero tolerance.
1. Pack contents
Minimum: RoE, MASVS lab, MDM pack, report, iOS stub if applicable, integrity index.
Optional: Android module labs — no refused technique files.
Command guide
Try these commands — Pack contents
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
MASTG evidence — https://mas.owasp.org/MASTG/ (document observations) OWASP MASVS — https://mas.owasp.org/MASVS/ Android security — https://developer.android.com/privacy-and-security/security-tips
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export MOB_LAB=${MOB_LAB:-$HOME/cyberlium-lab/t27-mob}
python3 - <<'PY'
import os
lab = os.environ.get('MOB_LAB', os.path.expanduser('~/cyberlium-lab/t27-mob'))
idx = os.path.join(lab, 'evidence', 'index.txt')
os.makedirs(os.path.dirname(idx), exist_ok=True)
notes = sorted(f for f in os.listdir(os.path.join(lab, 'notes')) if f.endswith('.txt')) if os.path.isdir(os.path.join(lab, 'notes')) else []
reports = sorted(f for f in os.listdir(os.path.join(lab, 'report')) if f.endswith(('.txt', '.md'))) if os.path.isdir(os.path.join(lab, 'report')) else []
open(idx, 'w').write('
'.join(['EVIDENCE PACK — YOUR lab only', 'Notes:'] + [f' - notes/{n}' for n in notes] + ['Reports:'] + [f' - report/{r}' for r in reports] + ['APK:', ' - apk/demo.apk (YOUR build)', 'Refusals: no stranger devices / no bypass scripts']))
print(f'Wrote {idx}')
PYCommand — copy this
grep -E 'EVIDENCE|Refusals|demo.apk' "$MOB_LAB/evidence/index.txt"
Primary tools to practice this lesson: grep, python3. Reference sites: MASTG evidence (https://mas.owasp.org/MASTG/); OWASP MASVS (https://mas.owasp.org/MASVS/); Android security (https://developer.android.com/privacy-and-security/security-tips). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Index fields
Artifact name, module lesson, path, UTC date, description, redactions applied.
Checklist row ↔ index row accountability.
3. Integrity
$MOB_LAB only, responsible reporting discipline, no fabrication, share-safe export.
Scan before seal — remove accidental tokens or unauthorized target paths.
4. What you ship: mobile security evidence pack
Bundled deliverables + index + integrity — chmod 600, report not fabrication default.
5. What you record before the next lesson
Evidence pack path.
6. Wrong vs right: stranger phones vs lab emulator apps
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Evidence pack includes stranger app bypass recipe and forged findings.
Right
Evidence pack assembled. Next: Capstone Lab.
Mission: assemble evidence pack
1) Bundle MASVS MDM report index. 2) Integrity statements. 3) Confirm zero refused technique files. 4) Gap note for Topic 28 Advanced Cryptography.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum index rows for capstone?”
Knowledge Check
APPLY: Evidence pack includes:
Multiple choice
Knowledge Check
APPLY: True or False: Bypass cookbooks OK in pack.
True or False
Knowledge Check
APPLY: Integrity line states:
Multiple choice