PERFORMING ANDROID STATIC ANALYSIS 101-A COMPLETE GUIDE FOR BEGINNERS

Summary from the TLDR InfoSec newsletter

This is a comprehensive guide to Android Static Analysis, which is a method of examining Android applications for security vulnerabilities without executing them. It covers several essential tools including APKTool, MobSF, Dex2jar, JD-GUI, Androguard, Ghidra, and APKleaks, explaining how each tool can be installed and used to analyze different aspects of Android applications such as permissions, hardcoded credentials, and potential security risks. The tools work together to create a robust security analysis approach, with each tool offering unique capabilities - from decompiling APKs to inspecting code and identifying vulnerabilities in the early stages of development.