Jacobo / Sergio Casado de Gracia / García Cabrera
Co-Founder at vulnit
Jacobo Casado de Gracia and Sergio García Cabrera are mobile application security specialists and members of vulnit, a cybersecurity company focused on advancing offensive security testing for mobile applications.
They contribute to the OWASP Mobile Application Security project, with a particular focus on the evolution of MASTG v2 and MASVS-RESILIENCE. Their work includes tests, techniques, best practices, and runnable demonstrations covering anti-debugging, emulator and virtual-device detection, runtime instrumentation detection, obfuscation, and application integrity controls.
Through these contributions, vulnit has been recognized as an OWASP MAS Advocate.
Testing Mobile App Resilience: A Hands-On OWASP MASTG Workshop
An 80-minute hands-on workshop where participants test and learn about mobile application resilience mechanisms, like root and emulator detection, anti-debugging, runtime instrumentation detection, integrity checks, and obfuscation in a purpose-built Android application. Every exercise is mapped to OWASP MASVS-RESILIENCE and MASTG v2, with equivalent iOS patterns and practical remediation guidance.
This workshop gives developers and security professionals an opportunity to learn mobile resilience testing directly from contributors who helped turn these mechanisms into focused, reproducible tests and runnable demos for OWASP MASTG v2.