#android-security

TCH

AR Arvin

MobileHackingLab “Strings” Lab Writeup

While most people in offensive security are busy with web, network, and now AI-related engagements, I wanted to spend time on a field I’ve…

Aug 18, 2026 · 7 min read · 3 claps #mobile-security #reverse-engineering #mobile-hacking

TCH

SH Shivangi Gupta

The Complete Android Security Roadmap for Developers: From First Principles to App Security

Most Android developers can build a login screen, call an API, and save data to a database. But ask them “how does an attacker steal your…

Jul 09, 2026 · 33 min read · 1 claps #mobile-security-android #cybersecurity #how-to-secure-android-app

TCH ECO

IY Iyke Emmanuel

Rokarolla: What Every Android Developer Needs to Know About the 2026 Trojan That Takes Over Your…

You spent months building your banking app. You followed every security guideline. SSL pinning. Obfuscation. Biometric authentication.

Jun 27, 2026 · 9 min read · 7 claps #android-security #mobile-banking #malware-analysis

AB abdelnasser

Account Takeover via Misconfigured OAuth in Android

TL;DR: Two Android apps using Auth0 left redirect URIs in their allowlist that nothing on Android actually owned. PKCE wasn’t enforced…

Jun 17, 2026 · 3 min read · 0 claps #android-security #bug-bounty #penetration-testing

TCH AI

AB abdelnasser

One Click Account Takeover via Misconfigured WebView

TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…

Jun 17, 2026 · 2 min read · 0 claps #android-security #bug-bounty #webview

TCH

MO Mohit Damke

Android Security in 2026 (Part 1): Stopping Improper Credential Usage with Kotlin

M1 — Hardcoded secrets, leaked tokens, insecure SharedPreferences

Jun 13, 2026 · 3 min read · 0 claps #mohit-damke #android-security #owasp-mobile-top-10

TCH

MO Mohit Damke

Android Security in 2026: Implementing OWASP Top 10 with Kotlin & Jetpack

Android Security Series introduction — what readers will learn across all 10 parts

Jun 13, 2026 · 1 min read · 0 claps #android-security #mohit-damke #mobile-owasp

TA Talsec

EUDI App Attestation Choices: AppiCrypt vs. Google Play Integrity & Apple App Attest

The EUDI Wallet secures the user’s identity, but AppiCrypt is what secures your Relying Party app against clones, mods, and malicious…

Jun 12, 2026 · 4 min read · 0 claps #attestation #mobile-security #android-security

BA Basithmohammedali

Mastering Frida: Solving the OWASP MSTG Android Lab Challenges

Introduction

Jun 04, 2026 · 28 min read · 0 claps #mobile-security #frida #android-security

ART TCH

AN Android Expert · Stackademic

Modern Android Security Architecture: A Complete Guide for Kotlin Developers

Secure Android apps end-to-end with Keystore, DataStore, TLS, and Play Integrity API best practices.

Jun 04, 2026 · 11 min read · 50 claps paywalled #android-security #android-keystore #android-data-encryption

ART TCH

AN Android Expert

Architecting Advanced Deep Linking for Large-Scale Android Apps

Moving beyond simple Intent filters to a scalable, type-safe, and secure routing pipeline for enterprise-grade modular applications.

Jun 02, 2026 · 4 min read · 1 claps paywalled #android-development #deep-linking #kotlin

SPT TCH MKT

AT Atul Sharma

How to detect Frida on Android programmatically

Sometimes we may encounter a problem regarding our Android application security and we need to prevent any kind of vulnerability to make…

Jun 02, 2026 · 5 min read · 10 claps #android-security #android-development #frida

TCH AI

SE sepideh akbarinezhad

Scoped Storage Deep Dive — Part 3: MediaStore and Modern Shared Media Access

In the previous part, we explored how the Storage Access Framework (SAF) enables user-controlled access to specific files and folders…

May 30, 2026 · 4 min read · 1 claps #android-security #android-privacy #scop-storage

TCH ART AI

SE sepideh akbarinezhad

Scoped Storage Deep Dive — Part 2: How SAF Enables User-Controlled File Access

In the previous part, we explored why Android moved away from unrestricted filesystem-style access to shared storage and introduced Scoped…

May 29, 2026 · 3 min read · 2 claps #android-security #android-privacy #scoped-storage

TCH AI

SE sepideh akbarinezhad

Scoped Storage Deep Dive — Part 1: Why Android Changed Storage Access

Android’s storage system has changed significantly over the years.

May 29, 2026 · 2 min read · 2 claps #android-security #android-privacy #scoped-storage

ECO TCH MDA HUM

RA Rajagiri Sai Ganesh

How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP

Unauthorised KeyManager modification via Java reflection bypass — enabling cryptographic registry tampering inside Google’s ecosystem

May 28, 2026 · 7 min read · 0 claps #android-security #cryptography #google-vrp

TCH

MA Manindersingh Security

How Android Apps Implement SSL Pinning — Explained Simply

SSL Pinning is one of the core security mechanisms used in modern Android applications to protect sensitive network communication.

May 28, 2026 · 3 min read · 0 claps #mobile-security #ssl #android-security

TCH MDA AI SPT

SA Sandiyo Christan · InfoSec Write-ups

Android Lock Screen Bypass via Google Gemini — The Patch That Wasn’t (Status: Not Fixed)

TL;DR: On a fully patched Pixel 6a running Android 16, an attacker with physical access can escape the lock screen in under 60 seconds…

May 27, 2026 · 4 min read · 6 claps #android-security #infosec-write-ups #google-vrp

4B @4b6o07

Potential Native Buffer Overflow in JNI Component of Android Note Keeper App

Hello hackers,

May 26, 2026 · 3 min read · 1 claps #reverse-engineering #android-security #binary-exploitation

TCH

AY Aybora Ünveren

Android Uygulamalarında IPC ve Bileşen Güvenliği

Bu yazımda Android uygulamalarında sıkça karşılaşılan bileşen ve IPC güvenlik zafiyetlerini ele alacağım. Bu zafiyetler; tek bir kullanıcı…

May 25, 2026 · 5 min read · 11 claps #android-security #mobile-security #penetration-testing

MO Mohammed Ashraf

DroidCave — Stealing Passwords Through an Over-Permissive ContentProvider

This is my writeup for the DroidCave challenge from 8kSec Android Labs. The goal is to build an app that looks completely innocent but…

May 24, 2026 · 3 min read · 0 claps #android-security #penetration-testing #ctf

MO Mohammed Ashraf

AndroDialer — When a Phone App Lets Anyone Make Calls For It

Step 1

May 24, 2026 · 2 min read · 0 claps #android-security #penetration-testing #ctf

MO Mohammed Ashraf

AndroPseudoProtect — Exploiting

Step 1

May 23, 2026 · 3 min read · 0 claps #android-security #penetration-testing #ctf

HUM

SA Samprit.Code

Building an Advanced Anti-Piracy & Security System for Android Apps

How Modern Android Apps Defend Against Cracking, Reverse Engineering, and Unauthorized Access

May 23, 2026 · 8 min read · 50 claps #crack-android-app #apk-protection #android-security

TCH

YE Yehor Mamaiev

I Scanned 10 Popular F-Droid Apps With My Security Scanner — Open Source ≠ Secure

“It’s open source, so it’s secure.”

May 23, 2026 · 5 min read · 0 claps #android-security #mobile-security #open-source

TCH

EL Elizebethmathew

Code Break Analysis: Investigating Silent Failure in an Android Login Module Using JADX

Introduction

May 20, 2026 · 2 min read · 4 claps #android #android-security #reverse-engineering

BY BytesBee

Android Security Update 2026: This New Feature Could Block Harmful Apps Forever

🚨 Android just got safer, but there’s a catch

Apr 17, 2026 · 3 min read · 0 claps #android-security-update #android-security #developer-verification

PO Pooja Pawar

AIDL In Android & How To Exploit It?

What problem AIDL solves?

Apr 13, 2026 · 3 min read · 4 claps #android-security #application-security #mobile-security

TCH MDA

VI Vishwas Adhikari

The Free Movie App That Was Robbing You Blind

The App That Looked Too Good to Be True

Apr 05, 2026 · 11 min read · 516 claps #cybersecurity #malware #netmirror

TCH

MO Mostafa Sharaf

eMAPT: ALL You Need to Know

Introduction

Apr 04, 2026 · 3 min read · 54 claps #mobile-security #emapt #android-security

SR Sruti Panigrahi

What Nobody Tells You About DexGuard (From My Own Integration Journey) — Part I ( Security Series )

It Started With “Let’s Just Add Security”

Mar 31, 2026 · 3 min read · 4 claps #dexguard #android-security #mobile-app-security

AN Android Expert · Stackademic

Part 8: Network Warfare — MITM Defense & Certificate Pinning

A Staff-level guide to preventing proxy interception and rogue CA attacks using Network Security Config and SPKI hashes.

Mar 30, 2026 · 4 min read · 2 claps paywalled #android-security #certificate-pinning #mitm-attacks

TCH AI

AN Android Expert · Stackademic

Part 2: The Android Vault — Hardware-Backed Token Storage

Moving beyond SharedPreferences: A Staff-level guide to securing JWTs using the Android Keystore, TEE, and StrongBox isolation.

Mar 26, 2026 · 4 min read · 2 claps paywalled #android-security #android-keystore #mobile-development

SPT MKT TCH

AT Atul Sharma

How to Detect a Rooted Android Device Programmatically

Security is a key part of development, and when it comes to Android applications, it becomes extremely critical.

Mar 24, 2026 · 2 min read · 1 claps #android-security #android-development #kotlin

TCH

NO Nolaand

Analisis Malware APK Palsu “PT.POS Indonesia.apk” (MobSF & JADX)

Di Indonesia, penipuan berbasis APK palsu yang menyamar sebagai aplikasi resmi PT Pos Indonesia (seperti tracking paket atau verifikasi)…

Mar 04, 2026 · 2 min read · 0 claps #malware #mobsf #jadx

TCH AI

EK Ekramul | Bangla Tech Zone

মোবাইল হ্যাক হয়েছে কিনা বুঝবেন কিভাবে? ১০টি ভয়ংকর লক্ষণ ও সমাধান (২০২৬ গাইড)

বর্তমানে আমাদের স্মার্টফোনেই থাকে ব্যাংকিং অ্যাপ, বিকাশ, ফেসবুক, ইমেইল, ব্যক্তিগত ছবি ও গুরুত্বপূর্ণ তথ্য। কিন্তু দুঃখজনকভাবে অনেকেই বুঝতেই…

Feb 26, 2026 · 1 min read · 0 claps #mobile-hacks #cybersecurity #online-safety

GEN

DN dnelsaka

My Honest opinion regarding the new eMAPT Exam

First of all, I would like to extend my greetings to everyone and hope you are all doing well. It has been quite some time since I last…

Feb 13, 2026 · 3 min read · 72 claps #android-security #emapt #elearnsecurity

TCH AI

BL Blue Bird Digital Technology

Public Wi-Fi Android Risks: Why Your Device May Be Vulnerable

Discover the hidden dangers of public Wi-Fi for Android users and learn practical ways to protect your personal data and online accounts.

Jan 27, 2026 · 2 min read · 2 claps #public-wi-fi-security #android-security #cybersecurity-tips

ECO

PE Pentest_Testing_Corp · MeetCyber

7 Critical Tips: Android Security Bulletin Jan 2026

(What “2026–01–05 Patch Level” really means + a practical BYOD rollout plan)

Jan 13, 2026 · 7 min read · 8 claps #android-security #android-update #patch-management

TCH ART SOC

DE Deven Chhajed · DevSecOps & AI

When a Photo Frame Becomes a Threat: The Unseen Security Flaw Inside Android-Based Digital Frames

Most people expect cyberattacks to arrive through suspicious emails, sketchy apps, or compromised Wi-Fi networks. Almost no one imagines…

Nov 25, 2025 · 4 min read · 131 claps #digital-frame #android-security #iot-vulnerability

ECO AI

MA Mahesh Ambekar

Goodbye SharedPreferences: The Future of Android Data Storage with DataStore & Keystore

For years, Android developers stored local data using SharedPreferences, and later switched to EncryptedSharedPreferences for added…

Nov 11, 2025 · 3 min read · 0 claps #jetpack-datastore #android-keystore #android-security

TCH

SA Sadineni Sai Sushanth

Identifying attack surfaces using drozer , understanding IPC and components in Android

What Drozer really is

Oct 09, 2025 · 4 min read · 0 claps #android #android-security #drozer

AN Andrew Zuo

No, Google Is Not Killing Sideloading

Verifying Developer Identities Just Makes Sense

Sep 13, 2025 · 5 min read · 66 claps paywalled #android #developer-verification #sideloading

TCH

AY Aybora Ünveren

Allsafe — Android Writeup

In this Medium article I find vulnerabilities in an app called Allsafe. You can get it from the GitHub repo below:

Sep 11, 2025 · 7 min read · 24 claps #mobile-security #cybersecurity #android-security

SA Salil M

Case Study: How I Accidentally Exposed Years of WhatsApp Chats from a Rooted Android Device

My accidental discovery revealed something — years of “encrypted” WhatsApp conversations accessible through just 2 database files.

Aug 23, 2025 · 5 min read · 1 claps #whatsapp #android-security #data-security

ECO TCH SCI

NU Numesh Dilusha · The PickMe Engineering Blog

Securing API Keys and Sensitive Data in Android Apps: A Practical, Modern Guide

1. Introduction

Aug 19, 2025 · 7 min read · 54 claps #android-security #api-key-protection #reverse-engineering

JA JackHunter

Android native string deobfuscation

Background

Jul 05, 2025 · 5 min read · 31 claps #android-reversing #android-security #reverse-engineering

TCH

MI Michael Cooter

Automating My Android Pentesting Lab Setup

As a mobile application penetration tester, I constantly find myself rebuilding my testing environment — spinning up fresh VMs, setting up…

Jun 16, 2025 · 1 min read · 3 claps #android-security #penetration-testing #mobileapplicationsecurity

RE Recep Emir

Android Runtime: Dalvik ve ART Mimarileri, Çalışma Prensipleri, Farklılıkları ve Donanım Üzerindeki…

Android işletim sistemi, uygulamaların çalışması için iki farklı runtime mimarisi kullanmıştır: Dalvik Virtual Machine (DVM) ve Android…

May 28, 2025 · 3 min read · 2 claps #android-app-development #android #android-security

TCH

GO Gokul

Android App Security: Step-by-Step Penetration Testing Tutorial Part-3

We will cover a few of the basic tools commonly used during testing. This blog will be updated with additional tools as tutorials for other…

Apr 28, 2025 · 5 min read · 0 claps #android-security #android-pentesting #pentesting-tools