I am new in mobile application penetration testing. Just curious to know, whether we need to perform the penetration testing on rooted devices or non rooted devices.
Why and why not? I have searched lots of articles on this, but at last I thought to raise a question regarding this.
Lots of online tutorials perform the penetration testing on emulators (rooted), as root is a high privilege user, and root user has all the permissions to access anything of an particular application. So, is this accurate to perform the testing on rooted devices?
Request you to please clear my doubt regarding this.