Mobile Penetration Test

[twinbaby]

Hi there

What is the best way to learn mobile PT.
So far I have and IOS iPad mini 9.3.5. Currently rooted with phoneix. And a Xiaomi note 4, already rooted with magisk.
Some say MAPT and some say GMOB is good. Are there any course syllabus which we can follow?

 

[Lastexile]

I would recommend going through the OWASP Mobile Testing Guide thoroughly. I don't see any resource that is more comprehensive than the guide.

https://www.owasp.org/index.php/OWASP_Mobile_Security_Testing_Guide
https://github.com/OWASP/owasp-mstg

 

[galapogos]

Agree with MSTG. There are a couple of other guides/blogs/articles but MSTG is OWASP backed.

I have GMOB, and the material is way more broad but shallow. MSTG is more geared towards mobile app PT, while GMOB covers mobile devices, networks, etc. GMOB material is also older.

 

[make_a_cake]

check out offensive security if you are interested.

 

[galapogos]

check out offensive security if you are interested.

Offsec doesn't currently have any mobile related training or certifications.

 

[twinbaby]

Agree with MSTG. There are a couple of other guides/blogs/articles but MSTG is OWASP backed.

I have GMOB, and the material is way more broad but shallow. MSTG is more geared towards mobile app PT, while GMOB covers mobile devices, networks, etc. GMOB material is also older.

I currently have elearnsecurity material as well.
I am looking towards more focus on mobile penetration testing.

 

[twinbaby]

I currently have elearnsecurity material as well.
I am looking towards more focus on mobile penetration testing.

I just pass the elearnsecurity course.

 

[Lastexile]

I just pass the elearnsecurity course.

was it useful?