# eMAPT - Mobile Application Penetration Tester

<figure><img src="https://312810188-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzfWZOB0rkLZwpUshFkIy%2Fuploads%2FImTr9poJX4AEKER90hgV%2Fimage.png?alt=media&#x26;token=2c44e9ef-28a5-42c8-b886-646f90a9ba66" alt=""><figcaption></figcaption></figure>

See my credential here:

{% embed url="<https://certs.ine.com/6135a791-c739-4dbf-a9ac-ad3e555120e4>" %}

### The certificatio&#x6E;**:**

**eMAPT** is a certification for individuals with a complex understanding of **mobile application** vulnerabilities and exploits.

{% embed url="<https://security.ine.com/certifications/emapt-certification/>" %}

<figure><img src="https://312810188-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzfWZOB0rkLZwpUshFkIy%2Fuploads%2Fd535PM8RcCsF3RiJEnQw%2Fimage.png?alt=media&#x26;token=03ab29eb-bbd3-4016-a763-3035caea2629" alt=""><figcaption></figcaption></figure>

### **Expiration:**&#x20;

Not expire.

### **Evaluation Type:**&#x20;

7 days, submit an exploit **APK** that exploit others apps vulnerabilities.

### **What It covers:**

1. **Mobile Application Vulnerability Assessment**: Techniques for identifying and exploiting vulnerabilities in mobile Android applications.
2. **Reverse Engineering and Code Analysis**: Methods for decompiling and analyzing mobile app code to uncover security flaws and weaknesses.
3. **Advanced Mobile Threats and Mitigation**: Strategies for understanding, mitigating, and defending against advanced mobile threats, including malware, insecure data storage, and data leakage.

<figure><img src="https://312810188-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzfWZOB0rkLZwpUshFkIy%2Fuploads%2FfhaLnqfScNXv9Vs40PGw%2Fmeme.jpg?alt=media&#x26;token=437fd35b-17f0-428e-ad59-1c3fea227bab" alt="" width="450"><figcaption></figcaption></figure>

### The exam:&#x20;

(14 - 17 May 2024)

Like always, i was working and doing certification at the same time. I was doing it in post-labor hours. I got problems running directly with **Android Studio**, so i got **Genymotion** running and things started ran smoothly. I got my lab like this: **Genymotion** to emulate Android OS and apps, and then **Android Studio** to develop the app to submit. You can connect the two via **ADB**. Get careful over computer resources, mine were always stopping responding, since its heavy tasks (big potato of pc i have)... and do not burn your house down with Android studio pls...

Its started a bit rough at first, but when then i got things going. You get some Android applications, you decompile it and then start looking at the code. The first vuln should be easy, at sight. You have to get that info and find a way to get it. Straightforward if you think and dominate other fields, like web apps.

After that, you can feel a bit stuck. Rethink what you did, and think deeply - "What can i do more with what i have?". Remember, it does not get out of that concepts. You just have to think "*outside*" the box. ;)&#x20;

**In the end, I submitted the app and 2 weeks later i received positive feedback - I passed the exam and earned the certification! 😁😎**

### The study materials:

* INE Course - Mobile Application Penetration Testing Professional:
  * <https://my.ine.com/CyberSecurity/learning-paths/eec5479e-a8d1-4803-817f-c016bb528639/mobile-application-penetration-testing-professional>
* Android Studio
  * <https://developer.android.com/studio>
* Genymotion (Alternative Android Emulator):
  * [**https://www.genymotion.com/**](https://www.genymotion.com/)
* A loot of google-fu, since i do not dominate the topic yet

### Review - should you buy it ?

For the price, I think it's not fair. It is 400$, so much for the small amount of topics they cover on the exam. And you don't even need to do dynamic analysis to pass the exam. It's very focused on one particular Android exploit and... that's not the case in real life... No SSL pinnings, and no advanced techniques either. It's a course that lacks a lot, and that should be revamped. Also, it only has Android, it has nothing with IOS, so you can skip that part of the preparation.

Is it a good for starting? Yeah... For the price? No. Can it be better? For sure.&#x20;

Also, it does not get updated in a long time :(

<figure><img src="https://312810188-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzfWZOB0rkLZwpUshFkIy%2Fuploads%2FmLTZnNa9pXhxwXdhjMIY%2Fimage.png?alt=media&#x26;token=e93e2244-f7ae-4b80-8cff-174c6fd74b63" alt=""><figcaption></figcaption></figure>

Hope you like it, DM me or reference this if it has helped you!

<figure><img src="https://312810188-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzfWZOB0rkLZwpUshFkIy%2Fuploads%2FPyexBKz8L44mT4hO3ZQp%2Fpitbull-dog.gif?alt=media&#x26;token=9015fd1e-ffa4-492c-a6ac-0fb2ba6b15a8" alt=""><figcaption></figcaption></figure>
