Android Pentesting - Android Architecture + Static Analysis with apktool + gf + jadx - Pt. 01

In this video we would start with android pentesting :
Basics of Android Architecture
Security Features in Android
APK Structures
Installing apktool & jadx-gui
Understanding folder structure & files
Finding secrets in apps
Exploiting a real world app
Searching for secrets
AndroidManifest.xml
Strings.xml
Raw resources
Using gf to search for secrets
Validating these secrets
▬▬▬▬▬▬ 🔗 Links ▬▬▬▬▬▬
manifestsecuri...
hackerone.com/...
▬▬▬▬▬▬ 🔗 Other Links ▬▬▬▬▬▬
🔥Stay Up-To-Date with latest in CyberSecurity and Bug Bounty Tips 🔥
omnisec.app/
💸 $100 Digital Ocean referral link :💸
m.do.co/c/5e8e...
Google FeedBack Form : forms.gle/rA9o...
Discord : / discord
Subreddit : / hackingsimplified
Telegram : t.me/hackingsi...
Hope it was worth your time.
Stay tuned.
Thank you everyone :)
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Disclaimer :
These materials are for educational and research purposes only.
Do not attempt to violate the law with anything contained here. If this is your intention, then LEAVE NOW! The creator of this video, nor anyone else affiliated in any way, is going to accept responsibility for your actions.
------------------------------------------------------------------------------------------------------------------------
#hacking #HackingSimplified #StartHacking #beTheHACR #websecurity #howtohack #hack #howtobeahacker #hackingCourse #bugBounty #bug #bounty #hacker #freeHacking #freecourse
hacking ,HackingSimplified, Hacking Simplified, Start Hacking ,Be The HACR, web security, how to be a hacker, free hacking, free hacking course, web security,hacking Course,bug Bounty,hacker,bug bounty,cyber security,bug bounty hunting

[@HackingSimplifiedAS]

If you like the content, make sure to like and subscribe. Share this to reach as many folks as possible :)

[@nishanthm6563]

bro am using kali linux gf command is not working bro

[@chasejensen88]

You and your smile will be a legend my friend. You've made some awesome tools and content, for real I'm pretty surprised you haven't blown up yet. Keep it up, they're coming

[@HackingSimplifiedAS]

Thanks Chase. This really made my day 🙌😀

[@anuvindtiwari8229]

Your videos are really informative.Thanks alot man for making such informative video.Keep it up .☺️👍

[@HackingSimplifiedAS]

Thanks mate 😃🙌

[@kAh00t]

Really useful video, added the gf tool to my tooling! Keep them up

[@HackingSimplifiedAS]

Thanks mate 😀

[@HarshalChauhan_]

Very well explained. your videos are always awesome.

[@shazone4141]

Waiting for second part and my question is what you've shown on gui starting of video decompilation is same in the last of video with apktool with storing file in that directory right. We can perform same thing on terminal with gf pattern search.

[@HackingSimplifiedAS]

Terminal pe hi to kiya 🤔

[@maroghal2071]

Hey, thank you for the video its very helpful. Is there any good Static Analysis tool? And how accurate are they?

[@HackingSimplifiedAS]

MobSF is good. You can try that.

[@maroghal2071]

@@HackingSimplifiedAS Thank you for answering, do you have any good resources where I can learn more about static analysis.

[@grahamparr4451]

This is really good vid ,thanks man

[@anuragpathak2848]

@Hacking Simplified is this io. fabric.ApiKey can be consider as sensitive API key

[@ghtkdfake1274]

Hey, This is the video one needs to start with Android Pentesting. I have setup everything on Windows. Can you please create an installation guide for gf tool on Windows. Will be great help.

[@karanthakkar04]

I cannot find the apk that you used in the video. Can you please upload a copy and share the link if you have so that I can follow? Edit: I found it on apksum and it is only website that has versions from 2019.

[@divyangchauhan9592]

Your content is very helpful!!! I have one suggestion please don't background music!! sometimes it's distracting...

[@HackingSimplifiedAS]

Thanks 🙌 Will work on that 😃🙌

[@Ramu_Sriram]

Thank you bro, learned something.

[@mr_t0mat042]

Really appreciate your work, keep going👍

[@HackingSimplifiedAS]

Thanks mate.

[@mr_t0mat042]

@@HackingSimplifiedAS waiting for next part💕

[@sampritdas783]

Nice video waiting for more videos on andro pentest 😁

[@HackingSimplifiedAS]

Thanks mate. If you like the content, consider sharing it :D

[@sampritdas783]

@@HackingSimplifiedAS sure 😁

[@gajendrantheepiha3851]

Omnisec link for security updates is not working . Please

[@sagarpatra2748]

Very good content. Hoping for more android pen testing contents.

[@HackingSimplifiedAS]

Thanks mate. If you like the content, consider sharing it :D

[@optionroots]

hi, can you plz tell me how to increase heap size error when i open any apk into jadx

[@neerajverma9226]

How to decompile JNI based files in android app?

[@surajvishwakarma9441]

Awesome video.... Can you let me know if there is any automated dast tool for mobile app

[@HackingSimplifiedAS]

You can see mobsf , it has dast as well.

[@surajvishwakarma9441]

Are there any commercial tool? Also is there any difference between web application dast and mobile application dast?

[@ahmedezealdean6189]

you are great man but the music is annoying

[@sauravshukla8351]

Nyc Video great explanation Buddy Thanks for such great content. Just wanted to know which Linux distribution you are using....

[@HackingSimplifiedAS]

Ubuntu, recently on manjaro. I try different things. But mostly it's Ubuntu.

[@hackersratremoteaccesstroj4238]

Evergreen content

[@HackingSimplifiedAS]

Thanks mate 🙌

[@dhrudeeppatel3098]

very good approach man...

[@HackingSimplifiedAS]

Thanks

[@이제동-b9q]

please dynamic analysis with drozer, frida, etc

[@TWINYT08]

Heyy Can U make videos on finding bugs in Java Script

[@F7FD]

Thanks a lot!!

[@pethe7]

Thank you. It helped me a lot.

[@domaincontroller]

02:30 Android architecture 07:20 sandbox 07:37 APK file structure

[@sabyasachisahoo8975]

what about if a applicaton made up Reactnactive or flutter

[@HackingSimplifiedAS]

Same for those as well

[@asadakhlaq1298]

Thanks for your help ☺️

[@ammartanweer3388]

You are making great content man if need any help ping us really great material

[@HackingSimplifiedAS]

Thanks mate. If you like this share this :D

[@goodboy8833]

I can say this will be a goto resource for learning android pt. Good content make part 2 buddy.

[@HackingSimplifiedAS]

Sure. Thanks 🙌 Means a lot.

[@ANKITPATEL-ju7ro]

Thanx for the awsome content!

[@HackingSimplifiedAS]

Thanks mate. If you like the content, consider sharing it :D

[@amanrai8054]

Good Topic

[@HackingSimplifiedAS]

Thanks mate. If you like the content, consider sharing it :D

[@TanmayBhattacharjee-gj3vb]

omnisec app is not working.

[@HackingSimplifiedAS]

Will be live by next month

[@umeshb8210]

Waiting for pt 2

[@umeshb8210]

Bro can u make a video on wat n all to look for in a android pentest

[@torsec6048]

your content is ows0me i lik3 it

[@HackingSimplifiedAS]

Thanks mate. If you like the content, consider sharing it :D

[@saikiranlingadally1036]

🔥👍

[@helloworld-dh4pk]

if u really want to explain then why r u disturbing with background music...

[@shopflicker]

we need android pentesting with burpsuite.plzzzzzzzzzzz

[@HackingSimplifiedAS]

Very soon :)

[@0ximtiaz]

next

[@0ximtiaz]

next....

[@ashutoshraval3255]

Aree bhai jara hindi me bolo to india ke kuch log smaja paay

[@shivam_vk]

Plz make video in hindi 😑😑

[@yrks1109]

There's a reason he uses english, because more audience can understand the content .

[@shivam_vk]

@@yrks1109 yes bro you are right 👌😁

[@glostar_Rx]

Done Hack th3