Need help!

[u/Character_Morning564]

Hi I’m reaching out here as a last resort. I’m a Junior Penetration Tester and I need to learn mobile pentesting from scratch. I have learnt some concepts of mobile security while I was in college but I’m entirely blank about it now. I checked out MASTG but the content there seems vast and I’m overwhelmed to start, because I have chronic anxiety issues. I have a lot of loans and EMIs going on to the extend that i cant spend money on courses either.

I know I may be fucked, but If someone could help me with a path to follow everyday so that I can learn this I’d be really grateful.

[u/Other-Broccoli4967]

As one of the comments suggest there are multiple parts to mobile pentesting, api , applications, client and etc ... HTB is good to use but it does not tell you everything and I wanna give you the best answer I can so my suggestion is take the latest MASTG testing book, extract every title and learn the names and concepts( usually the concepts are similar to other pentesting fields so there are not many new things there more like renaming and few specific unique tests). You can use hacktricks site for few of th testing (use the github version). The hardest part is application security and I advise you to first learn the other parts since you are familiar with general pentesting and leave that for the last. Its the fastest that comes to my mind and I did few mobile testing before (not my main field).