eMAPT Study Plan
Break Android and iOS apps with static analysis, Frida and traffic interception. A free, day-by-day eMAPT schedule built from the official INE Mobile Application Penetration Testing learning path syllabus, scaled to your exam date and weekly hours.
- Approx. cost
- $599
- Difficulty
- ♥♥♥♥♥
- Study time
- about 144h
- Start level
- Intermediate
> How long does eMAPT take?
The plan assumes about 144 study hours. Here is how that stretches across different weekly schedules.
| Hours per week | Time to finish |
|---|---|
| 5 hours | about 29 weeks (6.7 months) |
| 10 hours | about 15 weeks (3.5 months) |
| 15 hours | about 10 weeks (2.3 months) |
| 20 hours | about 8 weeks (1.8 months) |
| 30 hours | about 5 weeks (1.2 months) |
> eMAPT exam format
INE Security · INE Mobile Application Penetration Testing learning path
- Dual exam design testing both concepts and hands-on skill
- Recent candidates report about 12 hours on INE's exam platform with roughly 45 questions
- Parts cover methodology, static analysis and hands-on dynamic analysis of Android apps
- Candidates report a 70% pass mark and an exam VM without internet access. Confirm in INE's exam guide
- The learning path needs an INE Premium subscription
> eMAPT syllabus and study hours
Every topic in the plan, in order, with its baseline hours. The planner shrinks or stretches these to fit your dates.
Mobile Warm-up
How mobile apps are built and how to see their traffic.
- Android & iOS app architecture8h · learn
- Reading Java, Kotlin, Smali & Swift6h · learn
- Intercepting mobile traffic with Burp4h · learn
Course Domains: Foundations
Concepts, threat models and first look at an app.
- Mobile Application Security Foundations6h · learn
- Threat Modeling & the Attacker Mindset5h · learn
- Reconnaissance & Static Analysis12h · learn
Course Domains: Attacking Apps
Runtime manipulation, backends and the tools that matter.
- Dynamic Testing & Runtime Manipulation14h · learn
- API & Backend Security Testing8h · learn
- Reverse Engineering & Code Deobfuscation6h · learn
- Mobile Malware Analysis5h · learn
- Reporting & Communication3h · learn
Training Grounds
Labs are the course, but the exam rewards extra runtime practice.
- INE course labs15h · lab
- Vulnerable Android and iOS apps20h · lab
- Frida scripting practice10h · lab
Final Boss Prep
Methodology, recall and a full-length run.
- Mobile testing cheat sheet (MASVS & Mobile Top 10)5h · review
- Practice methodology & scenario questions5h · review
- Timed 12-hour mock exam12h · review
> Where to practise for eMAPT
Each task in your plan lists practice labs for its own topic. These are the best places to put in extra hands-on hours:
> eMAPT exam-day checklist
General logistics for exam week. The official exam guide always takes priority if it differs.
One to two weeks before
- Schedule your exam and add the start time, time zone and deadline to your calendar
- Read the official exam guide end to end: rules, allowed and banned tools, and what counts as proof
- Confirm the current exam format in INE’s exam guide, since the exam was overhauled in 2025
- Keep your Frida scripts and static-analysis commands ready, because the exam VM may have no internet access
- Complete a full-length timed practice run (12 hours if you can) on your exam setup
- Finalize your note-taking setup and templates (see the notes starter below)
- Build and review your cheat sheets and command references
- Arrange time off, tell people you will be unavailable, and plan your meals ahead
- Confirm whether the exam is proctored and what ID, camera or screen sharing you need
Machine and network
- Charge and test a backup device or phone hotspot, and know how to contact support if your connection drops
- Plug in your laptop and turn off sleep, updates and notifications for the exam
- Test access to the exam platform and check any browser or device requirements
- Install and test every tool you plan to use, and check none of them are banned
- Test your screenshot hotkeys and make sure you have plenty of free disk space
Proctoring and room (if required)
- Test your webcam, microphone and screen sharing on the proctoring platform
- Clear your desk and room as the rules require, and tell housemates not to interrupt
- Confirm what is allowed at your desk (second monitor, phone, notes, paper) and follow it exactly
- Learn the rules for breaks and for leaving the camera view
- Have your ID ready and know the check-in steps
During the exam
- Sleep well the night before, and skip last-minute cramming
- Prepare food and water, and set timers for break reminders
- Read the brief and scope carefully before you touch anything
- Write notes and capture proof as you go, not at the end
- Time-box each target and move on when stuck. You can come back later
- Stop new attacks with enough time left to verify your evidence
Finishing
- Review how your results are submitted or scored so nothing is missed before you close the lab
Suggested exam-day rhythm
- Hour 0 to 0:30. Connect, confirm the VPN, read the brief and set up your notes.
- Hour 0:30 to 2. Enumerate everything first. Rank targets by points and how promising they look.
- Through the day. Work in blocks of about 90 minutes with a 10-minute break after each. Time-box each target and rotate when stuck.
- Meals. Eat real meals away from your desk roughly every 5 to 6 hours.
- Around hour 6. Decide on a sleep window of 4 to 6 hours. A rested brain spots what a tired one misses.
- Last 2 hours. Stop new attacks unless you are very close. Verify proof, collect screenshots and outline the report.
- After the hands-on part. Confirm your submission or score is recorded.
▶ Open the interactive eMAPT exam kit
The kit lets you tick items off, download a notes starter and report template, and see a readiness score from your plan progress.
> Passed eMAPT with PWN PATH
No eMAPT debriefs yet
Passed a cert? A short debrief helps the next learner plan their own run, and it only takes a couple of minutes.
▶ Share my debriefDebriefs are self-reported. See all pass stories.
> Recent eMAPT changes
- Site OSIR, eCPPT, eMAPT, CRTE, BTL1: Added five new certs: OSIR, eCPPT, eMAPT, CRTE and BTL1, with a new Mobile app security track on the roadmap.
> Frequently asked questions
How long does it take to prepare for eMAPT?
PWN PATH builds the eMAPT plan on about 144 study hours. At 10 hours a week that is roughly 15 weeks, and at 20 hours a week roughly 8 weeks. Your own timeline depends on how much of the material you already know.
What is the eMAPT exam like?
Dual exam design testing both concepts and hands-on skill. Recent candidates report about 12 hours on INE's exam platform with roughly 45 questions. Parts cover methodology, static analysis and hands-on dynamic analysis of Android apps. Candidates report a 70% pass mark and an exam VM without internet access. Confirm in INE's exam guide. The learning path needs an INE Premium subscription.
How hard is eMAPT?
We rate eMAPT 3 out of 5. It suits testers who want a structured path into Android and iOS app security. Basic pentest methodology and some comfort with Android or iOS tooling.
How much does eMAPT cost?
Exam voucher price. INE sells its training subscription separately. Check INE for current pricing. Prices are approximate, in US dollars unless a currency is shown, and change often. Confirm with the vendor before you buy.
What should I study first for eMAPT?
Start with the "Mobile Warm-up" phase: Android & iOS app architecture, Reading Java, Kotlin, Smali & Swift, Intercepting mobile traffic with Burp. The planner puts topics in a sensible order and scales the hours to the time you have.
What are the prerequisites for eMAPT?
Basic pentest methodology and some comfort with Android or iOS tooling.
What should I do the week before the eMAPT exam?
Re-read the official exam guide for rules and banned tools, test your machine, network and exam platform access, finish a full timed practice run, finalize your notes and cheat sheets, and plan your meals, breaks and sleep. The exam-day checklist on this page covers it step by step.
How should I handle breaks and sleep during the eMAPT exam?
Hour 0 to 0:30: Connect, confirm the VPN, read the brief and set up your notes. Hour 0:30 to 2: Enumerate everything first. Rank targets by points and how promising they look. Through the day: Work in blocks of about 90 minutes with a 10-minute break after each. Time-box each target and rotate when stuck. Meals: Eat real meals away from your desk roughly every 5 to 6 hours.
What should I take after eMAPT?
eMAPT is one of the furthest steps in its track. The roadmap shows related certs in other tracks.
Is the PWN PATH study planner free?
Yes. There are no accounts and no sign-up. Your plan and progress are saved in your browser, and you can export a backup file, add the schedule to your calendar or print it.
> Plan your path
Good stepping stones before eMAPT:
Not sure eMAPT is right for you? Take the one-minute cert quiz.