Android Mobile App Security Assessment

Introduction:

Following tools can be used under your lab

Tools

• Static Analysis Tools

  • APKTool

  • Jadx-gui

  • autodroid

  • Dex2jar

  • androgaurd https://github.com/androguard/androguard

  • Regex

  • Yara

  • YaraX

  • Strings

  • arm assembly

  • ADB

    • apt-get install adb

• Reverse Engineering

  • IDA

  • Frida

  • Ghidra

  • Hopper

  • Radare 2

• Additional Tools

  • GenyMotion https://www.genymotion.com/

  • Noxplayer https://www.bignox.com/

  • Android Studio https://developer.android.com/studio

  • Environment : https://github.com/cryptax/androidre

Reference Videos

GitHub - WithSecureLabs/drozer: The Leading Security Assessment Framework for Android.GitHub

Android Applications PentestingHackTricks

Books

The Android Malware Handbook: Detection and Analysis by Human and MachineAmazon.com

Mobile Application Penetration TestingAmazon.com

Learning Pentesting for Android Devices: A Practical Guide to Learning Penetration Testing for Android Devices and ApplicationsAmazon.com