r/Pentesting • u/True-Juice-6203 • 16h ago

Mobile Penteration Testing Certifications

Hi All,

My manager has asked me to pursue a certification in Mobile Application Penetration Testing, specifically focusing on Android and iOS.

I've come across the eMAPT certification from INE, and I'm considering taking it.

For those who have taken eMAPT or have experience in mobile penetration testing, what are your thoughts? Is it worth pursuing, or would you recommend a better certification that covers both Android and iOS?

I'd appreciate your recommendations and feedback!

8 Upvotes

100% Upvoted

6 comments sorted by

3

u/EphReborn 15h ago

Stay away from INE certs. They were good when they were still eLearnSecurity's. Not so much now. I've heard good things about Mobile Hacking Lab and 8ksec however. Those may be worthwhile.

1

u/WRO_Your_Boat 13h ago

I wouldn't do the eMAPT, I am taking the PMPA from TSM right now. Honestly though, are you going fresh or do you have experience, because all the certs suck at teaching and are very outdated from like 2020. Some of the tools don't exsist anymore and a lot of the commands listed are either deprecated or just don't work because the tool has completely changed. Either way you are going to be doing a lot of reasearch and learning outside of the course and on your own, because their discord that is set up for help hasn't responded to my request in over a month.

What I would recommend is you get a used pixel 6, a used ipad 7th gen, and a macbook. Those will let you root both devices and let you use xcode. Ask your work to provide you with them and see what they say. Stay away from emulators because they suck or you would be paying for root access anyway.

2

u/True-Juice-6203 13h ago

not exactly fresh working as penetration tester and vulnerability management

oscp certified bb hunter also but my company wants a good cert to obtain whats ur opinion on this ?

2

u/WRO_Your_Boat 12h ago

I ment more new to mobile device testing. I am in the same boat as you only without the oscp since im working on that also, but I have been a junior pentester for a little bit now. I got my ejpt from INE and I honestly had a couple issues with it as a course too. With those issues piled on top of how many people talk bad about INE, I would just say do the PMPA. I looked at the eMAPT right after I finished my ejpt and my team lead who did take the course said it was terrible and to take the PMPA. But, like I said, I think you are going to be kinda boned either way you go for getting a "good" course.

Mobile code review is kinda a different beast, much like how Red teaming and Pentesting are 2 different things, or web app and AD pentests. I am sure that as someone with an oscp you can figure it out, but I just wanted to let you know you are going for a niche that you will get no help with pretty much. But being on our own and figuring things out is also kinda in the job description lol.

I needed to get it since my company needed someone to test mobile apps and I was the only person who could do it, even without the cert.

2

u/True-Juice-6203 12h ago

I agree thats why i asked before taking ine

thank you for this feedback am going for PMPA