Hacky Certified Mobile Pentester
HCMP · Level 2Introduction
Test Android and iOS apps and the servers behind them. Three levels, each self-paced, each with its own exam and certificate.
Buy now- Author: Gaurav Sharma
- Level: Level 2 · Practitioner
- Study time: 48 hours
- Certification: Hacky Certified Mobile Pentester
Curriculum
6 modules · 24 hours of guided learning · self-paced, with hands-on labs
Job-oriented, scenario-led progression in hacky certified mobile pentester. Exercises are conducted only in authorized training environments. The level builds on previous levels while adding distinct techniques, deeper evidence requirements and more complex capstones.
Prerequisites: Basic IT literacy and willingness to use Linux/Windows command lines.
Tool stack: Android Studio, adb, JADX, apktool, MobSF, Frida, objection, Burp Suite, Ghidra
6h guided instruction + 13h guided/independent practical labs + 5h reading, review and assessment. These are total learning hours, not 24 hours of live lectures.
Module 01Android/iOS architecture and test scope4 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 02Mobile OWASP MASVS and MASTG4 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 03Android emulator and ADB workflow4 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 04Static analysis of application packages4 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 05Mobile authentication and storage controls4 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 06Intercepting mobile API traffic4 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Guided scenario: demonstrate correct methodology, collect evidence and submit a short structured report.
20% knowledge checks, 60% hands-on practical, 20% evidence-based reporting Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints.
Final exam
A 2-hour online exam with a 70% pass mark. Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints. Attempts are free until you pass. The exam opens 7 days after purchase.
Curriculum
9 modules · 48 hours of guided learning · self-paced, with hands-on labs
Job-oriented, scenario-led progression in hacky certified mobile pentester. Exercises are conducted only in authorized training environments. The level builds on previous levels while adding distinct techniques, deeper evidence requirements and more complex capstones.
Prerequisites: Completion of Level 1 or demonstrably equivalent practical skills.
Tool stack: Android Studio, adb, JADX, apktool, MobSF, Frida, objection, Burp Suite, Ghidra
12h guided instruction + 26h guided/independent practical labs + 10h reading, review and assessment. These are total learning hours, not 48 hours of live lectures.
Module 01Static analysis of application packages6 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 02Mobile authentication and storage controls6 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 03Intercepting mobile API traffic6 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 04Certificate pinning and TLS validation5 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 05Android components and deep links5 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 06Runtime instrumentation in test apps5 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 07Secrets, cryptography and keychain/keystore5 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 08iOS application security workflow5 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 09Reverse engineering and code paths5 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Multi-system case: independently correlate artifacts, prioritize findings and propose tested remediation.
20% knowledge checks, 60% hands-on practical, 20% evidence-based reporting Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints.
Final exam
A 24-hour practical exam in a hosted lab, then 24 hours to submit your report. Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints. Attempts are free until you pass. The exam opens 7 days after purchase.
Curriculum
9 modules · 72 hours of guided learning · self-paced, with hands-on labs
Job-oriented, scenario-led progression in hacky certified mobile pentester. Exercises are conducted only in authorized training environments. The level builds on previous levels while adding distinct techniques, deeper evidence requirements and more complex capstones.
Prerequisites: Completion of Level 2 or equivalent professional experience; comfortable with independent investigations.
Tool stack: Android Studio, adb, JADX, apktool, MobSF, Frida, objection, Burp Suite, Ghidra
18h guided instruction + 40h guided/independent practical labs + 14h reading, review and assessment. These are total learning hours, not 72 hours of live lectures.
Module 01Android components and deep links8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 02Runtime instrumentation in test apps8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 03Secrets, cryptography and keychain/keystore8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 04iOS application security workflow8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 05Reverse engineering and code paths8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 06Mobile API authorization and business logic8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 07Tamper resistance and hardening verification8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 08Advanced mobile attack-chain assessment8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 09Mobile penetration test capstone8 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Professional engagement: plan, execute and defend a complex scenario with peer review and executive/technical reporting. HACKY SECURITY | CERTIFICATION CURRICULUM | 2026 3
20% knowledge checks, 60% hands-on practical, 20% evidence-based reporting Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints.
Final exam
A 48-hour scenario exam, assessed on your written report. Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints. Attempts are free until you pass. The exam opens 7 days after purchase.
What you receive
Course author
Gaurav Sharma
Founder & CISO, Hacky SecurityOffensive and Defensive Security Expert
Gaurav founded Hacky Security and leads its SOC, curriculum and AI security work. He has trained more than 40,000 professionals and has taught AI security at IIT Madras.
Frequently asked questions
Do I need to buy any software?
When does my course open?
Can I start at Level 2?
More from the offensive track
Hacky Certified Penetration Tester
Test company networks and write reports clients can act on.
Hacky Certified Web Application Pentester
Test websites and APIs against the OWASP Top 10.
Hacky Certified Social Engineering Analyst
Run approved awareness tests and measure the human risk.