PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

yeswehack.com | blog | #bug-bounty | #android | #mobile-security | #recon | #apk | #jadx | #mobsf
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An in-depth Bug Bounty guide to performing reconnaissance on Android apps – from extracting APKs to mapping endpoints, secrets and vulnerable components.
Published
Collected

Related coverage

blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · projectzero.google
Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
Project Zero researched the Samsung Galaxy S6 Edge and reported 11 high-impact security issues, discussing motivations, methodology and lessons learned from the device research.
research · eshard.com
Can AI bring Mobile Application Security Analysis in-house?
Can AI bring mobile app security analysis in-house? See how Epoch's time travel traces and an AI agent test an Android app against OWASP MASVS.
research · eshard.com
Recording Android App Execution Traces with Time Travel Analysis
How to record Android app execution traces for time travel debugging. Covers emulator setup, snapshots, and trace generation for mobile security testing.
research · slcyber.io
Expanding the Attack Surface: React Native Android Applications
Specific attack vectors in React Native Android applications: bundle loading via loadBundleFromURL and deep link handling with the Linking API.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
Back