Android App Security Testing
Analyze your own Android apps: reverse with jadx, hook with Frida, and test storage, IPC and SSL pinning.
One-time payment · lifetime access · lessons, labs, exam and certificate included · no subscription.
About this course
This course teaches hands-on Android application security testing on your own emulator or test device. You start by mapping the attack surface of an app, then decompile an APK with jadx to read its code and resources. You inspect local storage for secrets left in files, databases and SharedPreferences, and intercept HTTPS traffic to see whether certificate pinning holds. You enumerate exported Activities, Services, Providers and deep links, test WebView settings, and mine the APK and logcat for hardcoded keys. Using Frida you hook methods at runtime to understand client-side controls, then look at root and tamper detection and the backend API. Every lesson ends with a short challenge, a worked solution and a quiz, for legal testing only.
Lessons
- Introduction and safe setup Pro
- The Toolchain & Lab Pro
- Static Analysis — Decompiling the APK Pro
- Insecure Data Storage Pro
- Dynamic Analysis with Frida Pro
- Traffic Interception & SSL Pinning Bypass Pro
- Exported Components & Insecure IPC Pro
- Deep Links & WebView Attacks Pro
- Hardcoded Secrets, Logging & Backend Leaks Pro
- Root Detection & Anti-Tamper Bypass Pro
- The Mobile Backend — IDOR, BOLA & Tokens Pro
- Capstone: assess an app end to end Pro