Mobile Apps

Environment setup using Android Studio on Windows and Frida

Root Android device with Magisk

# Resources
https://8ksec.io/rooting-an-android-emulator-for-mobile-security-testing/

Download APK

# Resources
https://apkcombo.com/

Install app on rooted device

# Install application via APK or via Google Play Store
adb install-multiple .\<APP-NAME>.apk .\config.en.apk

Install Frida tools and bypass SSL pinning

# Get Frida Server https://github.com/frida/frida/releases

# Push Frida server to rooted Android device
adb push <FRIDA-SERVER-BINARY-PATH> /data/local/tmp

# Run Frida Server on rooted Android device
adb shell
su
./frida-server-17.7.3-android-x86_64

# Forward Frida server port from Android emulator to host device
adb forward tcp:27042 tcp:27042

# Install Frida tools on Windows in PowerShell window
python -m pip install frida-tools
# Add Frida Tools to Windows path (sysdm.cpl)
frida-ps -Uia

# Get Frida SSL pinning bypass script (https://codeshare.frida.re/@Q0120S/bypass-ssl-pinning)
frida -U -f nl.bosschepas -l ssl-pinning-bypass.js

# Configure Burpsuite to listen on all interfaces *.8080