Explore practical techniques for hacking Android and iOS applications using deep links and cross-site scripting (XSS) in this comprehensive conference talk from Ekoparty 2021. Dive into real-world case studies of vulnerable applications and learn immediately applicable methods for mobile app assessment. Discover how to execute deep link attacks for user impersonation, bypass authorization controls, and make unauthorized phone calls. Gain insights into XSS attacks and data exfiltration techniques for both Android and iOS platforms. Led by Abraham Aranguren, an experienced security professional and CEO of 7ASecurity, this action-packed session provides valuable knowledge for penetration testers, security researchers, and mobile app developers looking to enhance their understanding of mobile app vulnerabilities and defense strategies.