Mobile levels¶

Security Shepherd's 24 mobile levels are Android apps, in mobile/MobileShepherd/. Each one has a page in Security Shepherd, where you submit its result key, but the vulnerability is in the app, so you need an Android emulator or device to play them.

Instructions for running the apps with Security Shepherd 4.0 are being prepared separately from the web documentation. Until then, organisers usually open only the web levels, with Open Web App Levels Only.

The levels¶

Within a topic, the levels are listed from easiest to hardest. Tournament bands are described in How Shepherd works.

Insecure data storage¶

Level	Kind	Points	Tournament band
Insecure Data Storage	Lesson	25	Private
Insecure Data Storage 1	Challenge	60	Sergeant
Insecure Data Storage 2	Challenge	65	Sergeant
Insecure Data Storage 3	Challenge	60	Lieutenant

Reverse engineering¶

Level	Kind	Points	Tournament band
Reverse Engineering	Lesson	40	Private
Reverse Engineering 1	Challenge	50	Corporal
Reverse Engineering 2	Challenge	50	Corporal
Reverse Engineering 3	Challenge	76	Sergeant

Data leakage¶

Level	Kind	Points	Tournament band
Unintended Data Leakage	Lesson	40	Private
Unintended Data Leakage 1	Challenge	60	Lieutenant
Unintended Data Leakage 2	Challenge	70	Lieutenant

Content provider¶

Level	Kind	Points	Tournament band
Content Provider Leakage	Lesson	50	Private
Content Provider Leakage 1	Challenge	75	Admiral

Security decisions via untrusted input¶

Level	Kind	Points	Tournament band
Untrusted Input	Lesson	50	Corporal

Injection¶

Level	Kind	Points	Tournament band
Client Side Injection	Lesson	50	Corporal
Client Side Injection 1	Challenge	70	Lieutenant
Client Side Injection 2	Challenge	80	Major

Poor authentication¶

Level	Kind	Points	Tournament band
Poor Authentication	Lesson	50	Corporal
Poor Authentication 1	Challenge	60	Major
Poor Authentication 2	Challenge	70	Major

Broken crypto¶

Level	Kind	Points	Tournament band
Broken Crypto	Lesson	50	Corporal
Broken Crypto 1	Challenge	60	Sergeant
Broken Crypto 2	Challenge	75	Major
Broken Crypto 3	Challenge	180	Admiral