PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bug Bounty on Android : setup your Genymotion environment for APK analysis

yeswehack.com | vulnerability | #bug-bounty | #burp-suite | #android | #mobile-security | #frida | #mobsf | #genymotion | #apk-analysis
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A tutorial for Android bug bounty: setting up Genymotion with Open GApps and ARM translation for APK analysis, then testing with Burp Suite, Frida for SSL pinning bypass, and MobSF.
Published
Collected

Related coverage

blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
research · eshard.com
Can AI bring Mobile Application Security Analysis in-house?
Can AI bring mobile app security analysis in-house? See how Epoch's time travel traces and an AI agent test an Android app against OWASP MASVS.
research · eshard.com
Recording Android App Execution Traces with Time Travel Analysis
How to record Android app execution traces for time travel debugging. Covers emulator setup, snapshots, and trace generation for mobile security testing.
research · slcyber.io
Expanding the Attack Surface: React Native Android Applications
Specific attack vectors in React Native Android applications: bundle loading via loadBundleFromURL and deep link handling with the Linking API.
blog · netspi.com
Four Ways to Bypass iOS SSL Verification and Certificate Pinning
Ben Tindell covers four iOS SSL pinning bypass techniques with Burp Suite: installing a custom CA, SSLKillSwitch tooling, runtime hooking with Objection and Frida, and patching the IPA binary.
blog · netspi.com
Four Ways to Bypass Android SSL Verification and Certificate Pinning
Covers four Android SSL pinning bypass techniques of rising difficulty: injecting a custom CA, swapping packaged certs, hooking checks with Frida, and reversing custom certificate validation code.
Back