Android Applications Hacking for Bug Bounty and Pentesting

Explore Android architecture's layered software stack, including the Linux kernel, Android runtime and core libraries, the application framework, hardware abstraction layer, and the applications layer.

Explore the Android runtime (art) and its execution of Dalvik bytecode. Learn how art replaces Dalvik vm, uses jit and aot with profile-guided optimization and cloud profiles.

Explore genymotion, a virtual emulator for mobile devices, with or without VirtualBox, and set up a Google Pixel 3 device with configurable processor, memory, and network settings.

Install ADB in Linux and learn that ADB, the Android Debug Bridge, lets you install and debug apps, access a device shell, and communicate with a connected Android device.

Install jadx on Linux by downloading the release from GitHub, unzip and run the Linux binary; decompile APK files to view Java classes, manifest and resources.

Install runtime mobile security on linux using aramis, a frida-based UI, to hook android apps. Learn to install with npm, run the tool, and attach or spawn apps by package.

Install frida tools on Windows using Python package management. Upload the frida server to the Android device after identifying its architecture and downloading the correct binaries from the Frida release.

Install apktool on Windows by downloading the wrapper script and jar, ensure java 8+ compatibility, copy files to Windows directory, update PATH, and run apktool from cmd.

Install runtime mobile security on Windows by setting up Node.js and npm, installing RMS globally, and launching it at local IP: 5000 to view iOS packages and connect devices.

Decompile the APK with apktool, modify the app logic, repackage and sign the APK with a keystore, then install the modified file on a device.

Discover how to intercept mobile app traffic using Burp Suite, configure proxy settings, install certificates, and analyze requests and responses between the app and test sites.

Learn to bypass root detection in android apps using Frida and objection, identify the checks in a vulnerable bank app, and override them for bug bounty pentesting.

Learn to bypass ssl pinning in Android apps using Objection and Frida, understand certificate and public key pinning, and intercept traffic with a mitm proxy to test app security.

Patch an apk on non-rooted devices with objection by detecting architecture, unzipping the apk, ensuring android.permission.INTERNET, and injecting the gadget into the first activity constructor.

Learn to use free code share Frida scripts with objection startup scripts to bypass ssl pinning, spoof locations, and automate tests in android app pentesting.

Explore insecure data storage on Android apps, including escalated db, shared preferences, and Firebase time databases, and learn to identify sensitive data exposure during pentesting.

Explore Android storage options, including internal storage that is containerized and removed upon uninstall, deprecated mode_readable and mode_writable flags, and the risks of external storage and logging sensitive data.

Explore insecure data storage by inspecting how credentials are stored in shared preferences in plaintext within an intentionally vulnerable Android app.

Demonstrates insecure data storage example 3 by saving plaintext credentials to a local file in the app's internal storage, exposing sensitive data.

Explore how hard coding sensitive information like credentials and API keys in an app's source code creates security risks, demonstrated by a vendor secret key check that grants access.

Explore hard coding issues by inspecting a native library via strings and JNI, revealing a string check that grants access when matched.