Reconnaissance and Static Analysis (20%)

• Apply static analysis techniques to Android and iOS applications using appropriate tools.
  
• Extract and interpret app components, manifest/plist files, and permission declarations to assess security posture.
  
• Analyze mobile application binaries to identify hardcoded secrets, logic flaws, and misconfigurations.
  
• Decompile and inspect APKs/IPAs and obfuscated code to understand underlying functionality and security implications. 

Dynamic Testing and Runtime Manipulation (20%)

• Perform dynamic testing on mobile apps to observe runtime behaviors and interactions.
  
• Bypass runtime security protections, including SSL pinning, root/jailbreak detection, and anti-debugging mechanisms.
  
• Hook and modify app logic at runtime using tools like Frida, Objection, and Xposed to understand functional weaknesses.
  
• Analyze runtime data from WebViews, inter-process communications (IPC), and system logs to identify potential vulnerabilities. 

API and Backend Security Testing (15%)

• Identify undocumented or hidden API endpoints by inspecting app code and runtime behavior.
  
• Test authentication, session management, and authorization mechanisms for flaws like BOLA and BFLA.
  
• Exploit mobile API vulnerabilities related to token manipulation, insecure storage, and data exposure.
  
• Apply man-in-the-middle (MITM) techniques and analyze encrypted traffic by bypassing certificate pinning. 

Mobile Application Security Foundations (10%)

• Explain the core principles of mobile application security and their importance in the mobile threat landscape.
  
• Differentiate between security threats in mobile vs. web applications using threat modeling concepts.
  
• Identify and describe common vulnerabilities in mobile apps, supported by real-world examples.
  
• Describe the architecture of Android and iOS applications and explain how architectural choices affect security. 

Threat Modeling and Attacker Mindset (10%)

• Identify threat actors and construct mobile-specific threat models based on application context.
  
• Apply the PTES and OWASP Mobile Testing Guide methodologies to structure assessments.
  
• Analyze mobile applications from an attacker’s perspective to uncover potential exploitation paths.
  
• Plan and scope comprehensive mobile security assessment engagements using structured methodologies. 

Reverse Engineering & Code Deobfuscation (10%)

• Reverse engineer DEX, OAT, and Mach-O binaries to extract code and understand functionality.
  
• Analyze and defeat obfuscation techniques such as string encryption, control flow manipulation, and reflection.
  
• Patch and modify binary logic using tools like IDA Pro, Ghidra, and Hopper.
  
• Design and develop custom deobfuscation tools and Frida scripts based on disassembly results. 

Mobile Malware Analysis (10%)

• Explain the goals and techniques of mobile malware in the context of mobile threat ecosystems.
  
• Develop and analyze basic malicious mobile applications to understand behavior and evasion techniques.
  
• Identify dynamic behaviors, anti-analysis mechanisms, and evasion strategies used by mobile malware.
  
• Evaluate advanced persistent threat (APT) malware campaigns targeting mobile platforms through static and dynamic analysis. 

Reporting and Communication (5%)

• Document and communicate technical vulnerabilities and findings for both technical and non-technical stakeholders.
  
• Map assessment results to frameworks like OWASP MASVS, MTTG, and PTES to ensure compliance alignment.
  
• Generate actionable and developer-friendly security recommendations based on identified issues.
  
• Utilize reporting templates and tools to streamline the documentation and delivery of findings.

• Penetration testers expanding into mobile app testing
• Security analysts focused on mobile threat detection and response
• Developers seeking to secure their mobile codebases
• Red teamers integrating mobile vectors into attack simulations
• Cybersecurity consultants advising on mobile risk and compliance
• Malware analysts dissecting Android and iOS-based threats