# 3.1 Install application & use it

```
adb install path/to/app_name.apk
```

{% hint style="warning" %}
* In case it does not work:&#x20;
  * copy apk to phone and install it directly: _**adb push app\_name.apk /sdcard/**_&#x20;
  * download apk on phone and install it
{% endhint %}

{% hint style="info" %}
```
------------------------------------------------------------
!!!!!INTERCEPT THE WHOLE TRAFFIC FROM THE BEGINNING ON!!!!!!
------------------------------------------------------------
```
{% endhint %}

* Log in -> Browse around -> load content & so on ...&#x20;
* Look for:
  * **File up/download**&#x20;
    * try to bypass fileupload/-filter (often there is only a client-side validation)
  * **Activity** behavior & functionality
  * **ANYTHING** which indicates a communication to a backend/api or might be stored locally
* Check your proxy and look for suspicious behavior, requests, new/different endpoints & so on ...
