[A]ndroid [A]pplication [P]entest [G]uide
  • AAPG
  • 1. MANUAL STATIC ANALYSIS
    • 1.1 Decompile APK
    • 1.2 Check certificate
    • 1.3 Analyze AndroidManifest.xml
    • 1.4 Source Code Analysis
  • 2. AUTOMATED STATIC ANALYSIS
  • 3. MANUAL DYNAMIC ANALYSIS
    • 3.1 Install application & use it
    • 3.2 Bypass detections
    • 3.3 Analyze local storage
    • 3.4 Attack surface
      • 3.4.1 Activities
      • 3.4.2 ContentProvider
      • 3.4.3 Services
    • 3.5 Log analysis
    • 3.6 More HOW and WHAT! (still work in progress)
  • 4. APK TAMPERING
    • 4.1 DIY - Simple Reverse Meterpreter (Non-Xamarin)
    • 4.2 Quick Proof-of-Concept (Meterpreter)
Powered by GitBook
On this page
  • RETRIEVE APK
  • Download APK
  • From the device itself

Was this helpful?

1. MANUAL STATIC ANALYSIS

RETRIEVE APK

Download APK

  1. Search for your application @ https://play.google.com/store

  2. Copy URL (i.e: https://play.google.com/store/apps/details?id=com.whatsapp)

  3. Paste URL into one of the downloaders or one of your choice:

    1. apkcombo (recommended!!!!)

    2. evozi

    3. apkmirror

From the device itself

list all installed packages:

adb shell pm list packages

display apk path of package:

adb shell pm path com.x.x.x

copy the apk file to your system:

adb pull /data/data/com.x.x.x/app_name.apk
PreviousAAPGNext1.1 Decompile APK

Last updated 5 years ago

Was this helpful?