performing-dynamic-analysis-of-android-app

# Performing Dynamic Analysis of Android App ## When to Use Use this skill when: - Static analysis results need runtime validation on an actual Android device - The target app uses obfuscation (DexGuard, custom packers) that prevents effective static analysis - Testing requires observing actual API calls, decrypted data, or runtime-generated values - Assessing root detection, tamper detection, or anti-debugging implementations **Do not use** this skill on production environments without authorization -- dynamic instrumentation can alter app behavior and trigger security alerts. ## Prerequisites - Rooted Android device or emulator (Genymotion, Android Studio AVD with writable system) - Frida server installed on device matching the architecture (arm64, x86_64) - Python 3.10+ with `frida-tools` and `objection` packages - ADB configured and device connected - Target APK installed on device ## Workflow ### Step 1: Setup Frida Server on Android Device ```bash # Check device architecture adb shell getprop ro.product.cpu.abi # Output: arm64-v8a # Download matching Frida server from GitHub releases # https://github.com/frida/frida/releases # Push to device adb push frida-server-16.x.x-android-arm64 /data/local/tmp/frida-server adb shell chmod 755 /data/local/tmp/frida-server adb shell /data/local/tmp/frida-server & # Verify Frida connection frida-ps -U ``` ### Step 2: Enumerate Application Attack Surface ```bash # List all packages frida-ps -U -a # Attach Objection for hi...