
You’ll learn:
• How Android apps are structured - understanding the Manifest, Activities, Services, Broadcast Receivers, and Content Providers, and why each component becomes a potential attack surface
• What static vs dynamic analysis means - how static analysis (reading code, decompiling APKs) helps you understand logic and hidden secrets, and how dynamic analysis (runtime testing, interception, instrumentation) reveals real behavior during execution
• How tools like JADX and apktool are used to reverse engineer apps, how Burp Suite is used to intercept and analyze API traffic, and how Frida is used to hook functions and bypass protections during live assessments
This is not just theory - I’ll connect each concept to real-world attack scenarios, so you clearly understand how vulnerabilities are identified, exploited, and reported during actual mobile VAPT engagements.