Android Mobile Application Security Testing Write-Up

Android Mobile Application Security Testing Write-Up

Android Mobile Application Security Testing Write-Up

Android Mobile Application Security Testing Write-Up

Here, I learned how to find a deep link vulnerability in AllSafe, which is . AllSafe (an intentionally vulnerable Android app)
This app is…

How I reverse-engineered the Fused Location Provider, drowned real GPS in fake signals, and reflected into hidden APIs to make every app on…

Security shouldn’t be an afterthought. Here is how to lock down your modern Android applications using Kotlin.

If you’ve ever been curious about how apps like WhatsApp, Instagram, Uber, Spotify, or Amazon communicate with their backend servers…

Part 4 of our Android security series. Part 3 covered Certificate Pinning — this post covers a much quieter leak: your own log statements.

Part 3 of our Android security series. Part 2 covered Network Security Config — pinning builds directly on top of it.

Part 5 of our Android security series. Part 4 covered Secure Logging — this post covers the other half of CRYPTO: where your encryption…

Part 7 of our Android security series. Part 6 covered where to store sensitive data — this post covers a common mistake in gating access to…

Part 6 of our Android security series, kicking off Phase 2: Data & Auth. Part 5 covered Android Keystore — this post is about the layer…

Part 9 of our Android security series. Part 8 covered Credential Manager — getting the user signed in. This post covers what happens for…

Part 8 of our Android security series. Part 7 covered BiometricPrompt — this post covers what happens before that: how the user actually…

Part 14, closing out Phase 3 of our Android security series. Part 13 covered R8/ProGuard hardening — static defenses. This post covers the…

Why encryption, pinning, and root detection can’t save an app that lets the client decide what it’s allowed to do.

APK Static Mind Map

Real vulnerability reports, overlooked platform behavior, and practical fixes for code that looks ready to ship.

AndroidX Security State 1.1.0 treats installed patches, published fixes, and updates offered to a device as separate information.