رود ماب الـ Android Pentesting

دى نفس الرود ماب اللى ماشى عليها فى الـ Android Pentesting، والنسخة الانجليزى منها على GitHub فى ريبو Android-Pentest-Guide. كل ما اخلص درس بكتب له نوت وبحط اللينك بتاعها تحت المصدر بتاعه، فأى مصدر لسه مفيش تحته نوتس يبقى انا لسه موصلتلوش، والنوتس بتاعته هتتضاف اول ما اوصل له.

🎥 فيديو · 🧩 كورس تفاعلى · 🧪 لاب · 📖 قراية · ⏳ شغال فيه دلوقتى · ⏭️ اختيارى · ↳ موضوع جانبى

Phase 0 — Programming Foundation

• 🎥 El Desouky — Java for Beginners ⏳
  • النوتس بالانجليزى على GitHub
• 🎥 El Desouky — OOP with Java
• 🎥 Advanced Java — Inner Classes · Anonymous Inner Classes · Lambda Expressions · Generics · Map and HashMap · Base64 Encoding Explained! · Bitwise Operators and WHY we use them
• ⏭️ Kotlin (reading level) — Kotlin Koans

Phase 1 — Android Fundamentals & Security Model

• 🧩 Hextree — Your First Android App ⏳
  • Your First Android App
    • ↳ Android SDK
    • ↳ Gradle
• 🧩 Hextree — Research Device & Emulator Setup
• 🎥 Black Belt — Installation and Setup
  • السيكشن كله ما عدا:
    • Developer Options - Bluetooth Low Energy Hacking
    • Bluetooth Low Energy - Furby App Hacking
• 🎥 Black Belt — App Structure
  • السيكشن كله
• 📖 Android Security Internals — Ch 1 Android’s Security Model · Ch 2 Permissions · Ch 3 Package Management
• 🧪 INE lab — Inadequate Privacy Controls
• 📖 OWASP Mobile Top 10 · MASVS · MASTG “Android Platform Overview”

Phase 2 — Static Analysis & Reverse Engineering

• 🎥 Black Belt — Reverse Engineering Android Apps
  • السيكشن كله
• 🧩 Hextree — Reverse Engineering Android Apps
• 🎥 Black Belt — Smali (الجزء الاول)
  • من اول:
    • Recap
  • لحد:
    • Orange Belt - Solution
• 🧪 INE lab — iOS: Hardcoded Secrets
• 🧪 DIVA · InsecureShop · MobSF

Phase 3 — Dynamic Analysis, Network & Component Exploitation

• 🧩 Hextree — Network Interception
• 🎥 Black Belt — Man in the Middle
  • السيكشن كله ما عدا اخر 3 محاضرات (دول فى Phase 4):
    • Certificate Pinning - Patching Fingerprint
    • Certificate Pinning - Patching Certificate
    • Certificate Pinning - Objection (Bypass)
  • ⏭️ اختيارى:
    • Certificate Pinning - OpenSSL (Bonus)
• 🧪 INE labs — Insecure Network Transmission · Traffic Inspection with Burp
• 🧩 Hextree — Intent Attack Surface
• 🧩 Hextree — Broadcast Receivers
• 🧩 Hextree — Android Permissions
• 🧩 Hextree — Android Services
• 🧩 Hextree — Content- and FileProvider
• 🧪 INE lab — Mobile Vulnerabilities: SQLi in Android
• 🧩 Hextree — Android (Insecure) Storage
• 🧪 INE labs — Insecure Data Storage · Insecure Logging · Sensitive Information Leakage · Testing Debuggability
• 🧩 Hextree — WebViews and CustomTabs
• 🧪 INE lab — Mobile Vulnerabilities: XSS in Android
• 🧪 INE labs — API SQLi in Android · API IDOR in Android · API BFLA in Android · API Fuzzing · JWT Token Manipulation · Insecure Token Management · Insecure Auth 1 · Insecure Auth 2
• 🧪 InjuredAndroid · InsecureShop · DroidSiege
• 🏁 INE CTF 1 — SecureBank

Phase 4 — Runtime Manipulation

• 🎥 Black Belt — Smali (الجزء التانى)
  • من اول:
    • IF - Intro
  • لحد:
    • Rooting Detection - Solution2 (Bonus)
• 🎥 Black Belt — Man in the Middle (الجزء التانى)
  • المحاضرات دى بس:
    • Certificate Pinning - Patching Fingerprint
    • Certificate Pinning - Patching Certificate
    • Certificate Pinning - Objection (Bypass)
• 🧩 Hextree — Dynamic Instrumentation
• 🎥 Black Belt — FRIDA
  • السيكشن كله ما عدا محاضرات الـ NDK (دول فى Phase 5):
    • Hooking the Native Development Kit (NDK)
    • NDK hooking - Easy Way
    • NDK hooking - Hard way
    • NDK hooking - timing
    • Manipulating NDK methods (overwriting)
    • Reversing C - function in ghidra (Bonus)
    • Hooking C - function in frida (Bonus)
    • Red Belt - Challenge (FINAL)
• 🧪 INE labs — Insecure Biometric Failover · Insecure Authentication: Test Feature
• 🧪 Damn Vulnerable Bank · DroidSiege
• 🏁 INE CTF 2 — OrbitHR

Final stretch before the exam

• Report writing
• 🧪 8kSec — FactsDroid
• Mock assessment 1
• Mock assessment 2
• Readiness checklist
• 🏁 Book the exam

Phase 5 — Advanced Topics (post-exam)

• 🎥 Black Belt — Smali (الجزء التالت)
  • من اول:
    • Smali - Objects and Methods
  • لحد:
    • SMALI Debugging on Steroids
• 🎥 Black Belt — FRIDA (محاضرات الـ NDK)
  • المحاضرات دى بس:
    • Hooking the Native Development Kit (NDK)
    • NDK hooking - Easy Way
    • NDK hooking - Hard way
    • NDK hooking - timing
    • Manipulating NDK methods (overwriting)
    • Reversing C - function in ghidra (Bonus)
    • Hooking C - function in frida (Bonus)
    • Red Belt - Challenge (FINAL)
• 🎥 Black Belt — CTF - Series (New 2024!)
  • السيكشن كله
• 🧩 Hextree — Android Bug Bounty
• 🧩 Hextree — Bluetooth Reverse Engineering Basics
• 🧪 8kSec challenges 2 → 10
• 🧪 Mobile Hacking Lab
• 🧪 INE remaining labs — iOS: Insufficient Cryptography
• 📖 Oversecured blog
• 📖 Android Security Internals — Ch 4 → 13
• 🎥 Kotlin (reading level) — Kotlin Koans

Beyond the sources

مواضيع لسه محتاجة ادور لها على مصدر كويس قبل ما تدخل الرود ماب:

• Reading obfuscated Kotlin apps
• Cross-platform apps: Flutter, React Native, Xamarin / .NET MAUI
• Commercial protections: anti-Frida, anti-tamper, RASP
• Android internals in depth: Binder, ART, Zygote, SELinux
• Mobile authentication and backend
• ARM64 assembly basics
• Security changes in each Android version
• Learning from real reports