Notes Android

Thinks to static-check

Tools

• Android Studio: To emulate a android device and root device

Files

Unzip APK file and check

• AndroidManifest.xml (you can use strings to list)

• classes.dex (you can use strings to list)

---

Checklist

Android Permissions

• Exported vs. Non-Exported Components

• Normal System Permissions

  • Dangerous System Permissions