> For the complete documentation index, see [llms.txt](https://blog.syselement.com/tcm/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.syselement.com/tcm/courses/mapt/mapt-references.md).

# MAPT References

* [Mobile Application Penetration Testing - TCM](https://academy.tcm-sec.com/p/mobile-application-penetration-testing)
* [OWASP MASTG (Mobile Application Security Testing Guide)](https://mas.owasp.org/MASTG/)
* [OWASP Mobile Top 10](https://owasp.org/www-project-mobile-top-10/)
* [HackTricks - Android APK Checklist](https://book.hacktricks.xyz/mobile-pentesting/android-checklist)
* [HackTricks - iOS Pentesting Checklist](https://book.hacktricks.xyz/mobile-pentesting/ios-pentesting-checklist)
* [Course and FAQs - Discord](https://discord.gg/tcm)
* [awesome-mobile-security](https://github.com/vaib25vicky/awesome-mobile-security)

## Introduction

### Certifications

* [INE eMAPT](https://security.ine.com/certifications/emapt-certification/)
* [GIAC Mobile Device Security Analyst (GMOB)](https://www.giac.org/certifications/mobile-device-security-analyst-gmob/)

### Mobile App Pentesting

* [OWASP MASTG](https://mas.owasp.org/MASTG/)

## Lab Set Up

* [VMware Workstation Player](https://www.vmware.com/products/workstation-player/workstation-player-evaluation.html)
* [VirtualBox + VirtualBox Extension Pack](https://www.virtualbox.org/wiki/Downloads)
* [Kali Linux](https://www.kali.org/)
  * [Kali VM Installation - VMware - syselement](https://blog.syselement.com/home/operating-systems/linux/distros/kali-vm)
  * [pimpmykali](https://github.com/Dewalt-arch/pimpmykali)

***

## Android

* [Android Application Security](https://source.android.com/docs/security/overview/app-security)
* [Android Platform Overview - MASTG](https://mas.owasp.org/MASTG/Android/0x05a-Platform-Overview/)
* [Chmod Calculator](https://chmod-calculator.com/)
* [Android API Levels](https://apilevels.com/)
* [Kotlin](https://developer.android.com/kotlin)
  * [Kotlin - JetBrains](https://kotlinlang.org/)
* [Android Build Process](https://developer.android.com/build)
  * [Deep dive into Android build process - Abhishek Kumar](https://me-abhishek92.medium.com/deep-dive-into-android-build-process-4282f2af6465)
  * [Application Signing](https://developer.android.com/studio/publish/app-signing)
* [apktool](https://apktool.org/)
* [jadx](https://github.com/skylot/jadx)
* [Android Studio](https://developer.android.com/studio)
* [Genymotion](https://www.genymotion.com/)

### Android Static Analysis

* [InjuredAndroid](https://github.com/B3nac/InjuredAndroid)
* [AndroidManifest.xml](https://developer.android.com/guide/topics/manifest/manifest-intro)
  * [Permissions](https://developer.android.com/reference/android/Manifest.permission)
* [apktool](https://apktool.org/)
* [jadx-gui](https://github.com/skylot/jadx)
* [CyberChef](https://gchq.github.io/CyberChef)
* [Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF)

### Android Dynamic Analysis

* [Bypassing Certificate Pinning](https://mas.owasp.org/MASTG/techniques/android/MASTG-TECH-0012/)
  * [SSL Bypassing - Neelam Soni](https://medium.com/@neelamsoni/ssl-bypassing-without-using-jailbroken-ios-device-and-burpsuit-447f4fd3c210)
  * [SSL Pinning and Vulnerabilities Handling in Android - Sachin Rajput](https://medium.com/native-mobile-bits/ssl-pinning-and-vulnerabilities-handling-in-android-57e347feb39b)
* [BurpSuite](https://portswigger.net/burp/communitydownload)
* [Proxyman (macOS)](https://github.com/ProxymanApp/Proxyman)
* [mitmproxy](https://mitmproxy.org/)
* [Apktool](https://apktool.org/docs/install#linux)
* [Frida](https://frida.re/)
  * [Frida CodeShare](https://codeshare.frida.re/)
* [Objection](https://github.com/sensepost/objection)
  * [Patching Android Applications - Objection](https://github.com/sensepost/objection/wiki/Patching-Android-Applications)
  * [Patching an APK with Objection – CorSecure](https://corsecure.blog/2023/09/07/patching-an-apk-with-objection/)
  * [patch-apk](https://github.com/NickstaDB/patch-apk)
* [pidcat](https://github.com/JakeWharton/pidcat)

### Android Bug Bounty & Red Teaming

* [HackerOne Android programs](https://hackerone.com/opportunities/all/search?asset_types=GOOGLE_PLAY_APP_ID%2COTHER_APK\&ordering=Newest+programs)
* [O.MG Cable - Hak5](https://shop.hak5.org/products/omg-cable)
* [USB Ninja Cable - Hacker Warehouse](https://hackerwarehouse.com/product/usb-ninja-cable/)
* [Manual - Embedding Meterpreter in Android APK - Black Hills Information Security](https://www.blackhillsinfosec.com/embedding-meterpreter-in-android-apk/)
* [Ghost Framework](https://github.com/kp-forks/ghost-1)
  * [Protect Your Phone From Hackers Now! Watch How Hackers Remotely Access A Phone! - Loi Liang Yang](https://www.youtube.com/watch?v=0eAafqElwik)

***

## iOS

* [iOS Custom Firmware Guide](https://ios.cfw.guide/)
* [AppleDB - Software & Devices](https://appledb.dev/)
* [Apple Platform Security](https://support.apple.com/guide/security/welcome/web)
* [iOS Platform Overview - MASTG](https://mas.owasp.org/MASTG/iOS/0x06a-Platform-Overview/)
* [Apple Developer Program](https://developer.apple.com/programs/)
* [Xcode](https://developer.apple.com/documentation/xcode)
* [IPATool](https://github.com/majd/ipatool)
* [Corellium Virtual Hardware](https://www.corellium.com/)
* [Appetize.io](https://appetize.io/)

### iOS Dynamic Analysis

* [Proxyman for iOS](https://docs.proxyman.io/proxyman-ios/vpn-and-proxyman-certificate)
* [Atlantis for iOS](https://docs.proxyman.io/atlantis/atlantis-for-ios)
* [SecJuice Intro to Frida & Objection](https://www.secjuice.com/objection-frida-guide/)
  * [iOS Pentesting Tools Part 3: Frida and Objection](https://www.allysonomalley.com/2018/12/20/ios-pentesting-tools-part-3-frida-and-objection/)
* [iOS CFW Guide](https://ios.cfw.guide/)

***