Android Penetration Testing 101

Goals

What will you learn in this course:

• Understand Android Architecture: Gain a comprehensive understanding of the Android architecture and its components, providing a solid foundation for Android security testing.

• Perform Static Analysis: Learn how to conduct static analysis on Android applications developed using various frameworks such as React Native, Java, Flutter, and Cordova. Explore tools like Jadx, Jeb decompiler, and GDA decompiler to effectively analyze the code and identify vulnerabilities.

• Utilize Automated Scanners: Master the installation and usage of automated scanners like MOBSF to perform dynamic analysis on Android applications. Learn how to identify common vulnerabilities during the scanning process and discover key endpoints for further investigation.

• Explore Dynamic Analysis: Understand the importance of dynamic analysis in mobile application security testing and its role in hunting vulnerabilities. Set up a dynamic analysis lab using tools like Burp Suite and Genymotion to simulate real-world scenarios.

• SSL Pinning and Bypass Techniques: Gain a deep understanding of SSL pinning and its significance in securing mobile applications. Explore various methods to bypass SSL pinning on Android devices to uncover potential vulnerabilities.

• Dynamic Analysis Tools: Familiarize yourself with advanced dynamic analysis tools such as Frida and objection. Learn how to set up and utilize these tools effectively during dynamic analysis to identify vulnerabilities and extract sensitive information.

• Live Dynamic Analysis: Perform a live dynamic analysis on an Android application, applying the knowledge gained throughout the course. Identify common vulnerabilities, locate relevant endpoints, and extract sensitive information from the app's database.

• Android Pentesting Checklist: Acquire a handy checklist to assist in Android penetration testing. Use this reference guide during real-time analysis to ensure a systematic and thorough approach.

Prerequisites

What are the prerequisites for this course?

• Fulfill your curiosity and desire to learn something new through the Android Penetration Testing 101 course.
• Ensure your computer meets the minimum requirements of 8GB RAM and 100GB of available storage for a smooth learning experience.
• Prioritize gaining basic knowledge of Android development, as it will greatly enhance your understanding of the course material.