In my Android security assessment labs, I performed static and dynamic analysis aligned with OWASP MASVS and MASTG. I examined application logic, APIs, and client-side security controls.
I developed custom Frida scripts for runtime instrumentation and analysis of SSL pinning and root detection. Using JADX and APKTool, I analyzed APKs for hardcoded secrets, insecure API endpoints, and application logic flaws.
In mobile API and local storage assessments, I analyzed application traffic with Burp Suite and evaluated Android storage for insecure data handling. I also documented findings, proof-of-concept evidence, impact, and remediation recommendations; I hold eMAPT and CAAPT certifications.
