Mobile › Module 1 › Lesson 4
Lab — Setup
Pack mobile scope, device inventory, and ethics card — lab setup file only, dest $MOB_LAB.
Visual · t27_lab_setup
Lab: write mobile setup pack. $MOB_LAB only. Original Cyberlium.
Opening
Lab setup before jadx or Frida — scope paperwork mobile mentors expect.
Lessons 1–3 defined why mobile security matters, lab devices only, and stranger-phone refusal. This lab ships the combined artifact: topic scope paragraph, device inventory row, and ethics card for $MOB_LAB. No tool execution required — scope and device paperwork first. Next: Quiz — Mobile Mindset and Lab.
1. Lab contract: write the setup pack
Create $HOME/cyberlium-lab/t27-m01-l04-lab-setup.txt with date, operator, $MOB_LAB device placeholder, literacy vs unauthorized probing paragraph, device inventory row, and ethics card.
Optional: one-line proof your emulator or lab AVD exists — still no stranger-device work required in this lab.
Command guide
Try these commands — Lab contract: write the setup pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
RoE literacy — https://mas.owasp.org/MASTG/ (document scope before testing) Android emulator docs — https://developer.android.com/studio/run/emulator OWASP MASTG repo — https://github.com/OWASP/MASTG
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
export MOB_LAB=${MOB_LAB:-$HOME/cyberlium-lab/t27-mob}
cat > "$MOB_LAB/roe.txt" <<'EOF'
MOB_LAB=$HOME/cyberlium-lab/t27-mob
MOB_LAB_DEVICE=emulator-5554 # set to YOUR lab emulator serial
targets: YOUR emulator + YOUR demo.apk + authorized MSTG/DVIA samples only
never: stranger phones, production app bypass, store piracy resign flows
allowed: adb devices/version, unzip demo.apk, jadx/frida version checks, openssl s_client literacy
EOFCommand — copy this
chmod 600 "$MOB_LAB/roe.txt" grep -E 'MOB_LAB|never|allowed|targets' "$MOB_LAB/roe.txt" command -v adb >/dev/null && adb version | head -3 || echo 'adb not installed — install Android platform-tools for lab emulator literacy'
═══ WINDOWS ═══
Run on YOUR lab Windows VM with Android emulator only
Command — copy this
Get-Content $HOME/cyberlium-lab/t27-mob/roe.txt | Select-String never
adb version 2>$null; if (-not $?) { Write-Output 'Install Android platform-tools for lab emulator literacy' }Primary tools to practice this lesson: grep, curl. Reference sites: RoE literacy (https://mas.owasp.org/MASTG/); Android emulator docs (https://developer.android.com/studio/run/emulator); OWASP MASTG repo (https://github.com/OWASP/MASTG). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check against misuse patterns
Grep notes for 'hook bank,' stranger serial, pinning bypass cookbook, or live victim app names — redact or delete. Rewrite forum habits to $MOB_LAB placeholders before you copy workflows.
Classmates build their own setup packs for their $MOB_LAB — not yours.
3. Lock the proof
chmod 600 on the pack. Quiz is next — then Android Stack.
Mobile mentors archive lab setup before first adb connect; you are practicing that habit early.
4. What you ship: mobile lab setup pack for $MOB_LAB
Setup pack: scope, device row, ethics card. $MOB_LAB named. NEVER stranger phones. chmod 600.
5. What you record before the next lesson
Date. Setup pack path. $MOB_LAB scope note. File t27-m01-l04-lab-setup.txt chmod 600.
6. Wrong vs right: stranger phones vs lab emulator apps
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Skip the file and run adb on unknown hardware. Add stranger phone to approved list.
Right
Write YOUR lab setup pack for $MOB_LAB. chmod 600. Next: Quiz — Mobile Mindset and Lab.
Mission: freeze YOUR lab setup pack on disk
1) Merge scope, device, ethics sections. 2) Name $MOB_LAB. 3) chmod 600. Never list stranger-device analysis as approved practice.
Stuck? Ask Cyberlium AI Mentor
Setup packs are boring on purpose — boring keeps mobile work defensible.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: You should chmod 600 on mobile lab notes.
True or False
Knowledge Check
APPLY: A tutorial hooks a production finance APK. You:
Multiple choice