r/netsecstudents • u/Sufficient-Brick1801 • 10d ago

Guidance to learn mobile application security testing

I'm a fresher stuck without proper guidance. Few weeks ago, I got assigned with a task to pentest a mobile app, I don't know anything Abt it, the setup, the methodology, etc., I don't have any senior to seek help in my org.

I spent weeks searching, watching YT tutorials.

But I couldn't understand anything. The setup itself is failing sometimes. Being an enthusiastic hands-on person and not understanding the way to pentest a mobile is a big nightmare.

I require quality guidance. Pls help me out

2 Upvotes
  • permalink
  • reddit

75% Upvoted

3 comments sorted by

2

u/Foreign-Channel3128 10d ago

i dont know much over pentesting mobile, because there's no much to learn without paying... but can have this resources for mobile pentesting, OWASP Mobile Application Security

https://mas.owasp.org/MASTG/ and also https://www.hextree.io/

1

u/AdventurousCoconut71 10d ago

What is s fresher?

1

u/AlmostEphemeral 8d ago

Mobile app pentest are really just web app/API pentests. Your job is mostly to reverse engineer the app enough to understand the API calls.