Mobile Security Skill

Quick Workflow

Progress:
- [ ] Extract APK/IPA
- [ ] Decompile (jadx for Android)
- [ ] Search for hardcoded secrets
- [ ] Check native libraries
- [ ] Dynamic analysis with Frida if needed
- [ ] Extract flag

Quick Analysis Pipeline

# Android APK
file app.apk
apktool d app.apk -o extracted/
jadx app.apk -d output/
grep -r "flag\|secret" output/

# iOS IPA
unzip app.ipa -d extracted/
strings Payload/App.app/App | grep -i flag

Reference Files

Topic	Reference
Android APK Analysis	reference/android.md
iOS IPA Analysis	reference/ios.md
Frida & objection	reference/frida.md

Tools Summary

Tool	Purpose	Install
jadx	Java decompiler	github.com/skylot/jadx
apktool	APK decode/rebuild	apktool.org
Frida	Dynamic instrumentation	pip install frida-tools
objection	Runtime exploration	pip install objection
Ghidra	Native lib reversing	ghidra-sre.org
dex2jar	DEX to JAR	github.com/pxb1988/dex2jar

CTF Quick Patterns

# Flag in resources
grep -r "flag\|ctf\|secret" extracted/res/

# Flag in native library
strings extracted/lib/*/*.so | grep -i flag

# Hardcoded secrets
grep -r "api_key\|secret\|password" output/