# Mobile Application Penetration Testing

### Tools

* Win or Lin - Android Studio
* Lin - PimpMyKali
* Lin - adb
* Lin - apktool

***

## Android Static Analysis

### How to Find Hardcoded Strings <a href="#lecture_heading" id="lecture_heading"></a>

> Search by; https, api, password, user

<figure><img src="https://3697469405-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSrcwXlKGkwhzbrKa8vLU%2Fuploads%2FZq1jR6jWOkwC6AB5uGhf%2Fimage.png?alt=media&#x26;token=59f2c19f-2d0e-48bc-ab89-c16055723934" alt=""><figcaption></figcaption></figure>
