Mastering Android Security Research: A Guide for the Modern Security Researcher
summary
Cites Android at 71.74% market share and 3.3 billion users and ships an ASR playbook (open-sourced on GitHub) that walks through lab setup (Genymotion, Android Studio, VMware/VirtualBox), ADB/ADB server workflows, APKTool and JADX decompilation, MobSF and low‑level Ghidra/GDB analysis, dynamic instrumentation with Frida and Objection, and fuzzing with AFL/AFL++; an example run produces a unique crash in 19 seconds and three crashes by 25 seconds, and guidance covers bypassing NX/ASLR, anti‑debug/anti‑VM, and exploitation effects.
AI-written summary · about
chapters (11)
- 0:00Introduction to Android Security
- 10:58Android Security Research Setup
- 14:07Reconnaissance for Target Research
- 16:35Static Analysis Techniques
- 20:26Dynamic Analysis Methods
- 23:18Vulnerability Discovery Classes
- 28:17Automated Fuzzing Process
- 30:05Bypassing Exploit Mitigations
- 35:00Exploitation Effects Demonstration
- 37:30Resources and Next Steps
- 41:21Q&A Session
related talks
34mDemystifying Android Security
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
42mTesting Android Security
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
43mSecurity in Android Applications
29mSecuring Android Applications - The not so se…
41mFive Years of Android Security Research: the Good, the Bad...
26mHow to become your app's 'security champion'.