Introduction to Mobile Security

Tools

Android Studio

• Android Studio Download

JADX

• JADX on Github
• JADX Online Decompiler

Frida

• Frida

Tutorials

• hextree.io Android security course
• Create your first Android app (uses the newer Jetpack compose)
• OWASP Mobile Security Knowledge Base

Android WebView Security

JavaScript Bridge

• MyCats (APK)

JavaScript Code Injection

• WebUntisViewer (APK)
• WebUntis Script
• Blog Post by Felix Krause
• Paper: "An Empirical Study of Web Resource Manipulation in Real-world Mobile Applications" (USENIX 2018)

Android Tapjacking

• Paper: "TapTrap: Animation-Driven Tapjacking on Android (USENIX 2025)
• Website