After analyzing hundreds of mobile applications, it is easy to identify where most app developers breakdown. Penetration Testers are easily able to exploit basic default configuration vulnerabilities on various mobile platforms, API’s, and frameworks. Due to the huge amount of hybrid mobile applications, these vulnerabilities affect both Android and iOS applications. Native applications are not safe from these susceptibilities either. Join me as we uncover common vulnerabilities that will be easily spotted on your next mobile assessment using free and open source tools.