Android Fuzzing and Vulnerability Research
Fuzz native libraries, parsers and IPC on your own Android emulator, then triage and report crashes responsibly.
One-time payment · lifetime access · lessons, labs, exam and certificate included · no subscription.
About this course
This course teaches vulnerability research through fuzzing, run locally against your own native libraries or open-source code you compiled. You learn the difference between dumb and coverage-guided fuzzing and how to choose attack surface that parses untrusted input. You build a libFuzzer harness around LLVMFuzzerTestOneInput, instrument a native library for AFL++, and compile with AddressSanitizer so memory corruption is reported precisely. You design seed corpora and mutations, read coverage to avoid fuzzing blind, and extend the work to Android IPC and system services. Finally you triage crashes to tell real vulnerabilities from noise and write a responsible-disclosure report. Each lesson includes a challenge, a solution and a quiz, for legal research only.
Lessons
- Introduction and safe setup Pro
- What to Fuzz on Android Pro
- Fuzzing Fundamentals Pro
- Building a Fuzzing Harness Pro
- AFL++ Setup & Native Harnesses Pro
- Corpus, Seeds & Mutations Pro
- Sanitizers: ASan, UBSan, MSan Pro
- Measuring & Growing Coverage Pro
- Fuzzing System Services & Binder Pro
- Crash Triage & Exploitability Pro
- From Crash to CVE Pro
- Capstone: a full research loop Pro