Hands-On Android Security: Mastering ADB, Frida, JADX, Burp Suite, and Genymotion for Ethical Hacking + Video

By /

Listen to this Post

Featured Image

Introduction:

In the rapidly evolving landscape of mobile application security, understanding the internal workings of Android applications is no longer optional—it is a critical competency for cybersecurity professionals. Modern Android security assessments require a robust toolkit that bridges static analysis, dynamic instrumentation, and runtime traffic manipulation. By mastering tools such as ADB (Android Debug Bridge), Frida, JADX, Burp Suite, and Genymotion, security researchers can effectively identify vulnerabilities, bypass protections, and strengthen application security postures. This article provides a comprehensive, hands-on guide to these essential tools, offering actionable commands, configuration steps, and real-world testing methodologies derived from a recent Android App Security workshop.

Learning Objectives & Secrets:

  • Objective 1: Master ADB for Device Control and Application Management. Learn to use ADB to connect, install, uninstall, and extract APKs, as well as to interact with the Android shell and manage device settings.
  • Objective 2 Secret Tip: Bypass Root Detection with Frida. Use Frida’s dynamic instrumentation to hook Java and native methods, effectively bypassing root detection mechanisms that would otherwise crash the application.
  • Objective 3 Secret Tip: Intercept and Analyze Encrypted Traffic. Configure Burp Suite with Genymotion to intercept and decrypt HTTPS traffic from Android apps, including those with certificate pinning, by installing a custom CA certificate.

You Should Know:

  1. Android Debug Bridge (ADB) — The Foundation of Android Testing

ADB is a versatile command-line tool that allows you to communicate with an Android device or emulator. It is the gateway for几乎所有 subsequent security testing activities.

Step‑by‑step guide:

  • Setup and Device Connection:
  • Install ADB on Linux: sudo apt install adb.
  • On Windows, download the SDK Platform Tools from the Android developer website.
  • Enable USB Debugging on your Android device via Settings → Developer Options → USB Debugging.
  • Verify the connection: adb devices. To target a specific device, use adb -s <serial> <cmd>.

  • Device Information Retrieval:

  • Get the device model: adb shell getprop ro.product.model.
  • Check the Android version: adb shell getprop ro.build.version.release.

  • View screen resolution: adb shell wm size.

  • Application Management:

  • Install an APK: adb install app.apk.
  • Reinstall an app while keeping its data: adb install -r app.apk.
  • Uninstall an app: adb uninstall com.example.app.
  • List all installed packages: adb shell pm list packages.
  • Force-stop a running app: adb shell am force-stop com.example.app.

  • Extract an APK from a device: adb pull $(adb shell pm path com.pkg | cut -d: -f2) ./app.apk.

  • Permission and Settings Management:

  • Grant a permission: adb shell pm grant com.example.app android.permission.CAMERA.
  • Revoke a permission: adb shell pm revoke com.example.app android.permission.CAMERA.
  • Change system settings, e.g., brightness: adb shell settings put system screen_brightness 128.
  1. JADX — The APK Decompiler for Source-Code Analysis

JADX is a powerful tool that converts Android’s DEX bytecode into readable Java source code, making it indispensable for static analysis, identifying hardcoded secrets, and understanding application logic.

Step‑by‑step guide:

  • Installation and Basic Usage:
  • JADX can be used via its command-line interface (CLI) or its graphical user interface (GUI), jadx-gui, which is excellent for interactive exploration.

  • Decompiling an APK:

  • Basic decompilation: jadx app.apk -d app-decompiled. The output will be a directory containing `sources/` (Java source code) and `resources/` (decoded resources like AndroidManifest.xml).

  • For obfuscated applications, use the deobfuscation flag: jadx --deobf app.apk -d app-decompiled. This attempts to rename obfuscated classes to something more readable.

  • Advanced Options:

  • Speed up decompilation by using multiple threads: jadx -j 4 app.apk -d output.
  • Skip resource decoding to focus only on the source code: jadx --1o-res app.apk -d output.
  1. Burp Suite — Intercepting and Analyzing Application Traffic

Burp Suite is a leading web proxy used to intercept, inspect, and modify traffic between an Android app and its backend servers. This is crucial for identifying API vulnerabilities, insecure data transmission, and business logic flaws.

Step‑by‑step guide:

  • Configuring Burp Suite Proxy:
  • Open Burp Suite and navigate to Proxy → Proxy Settings.
  • Add a new proxy listener. Set “Bind to port” to an available port (e.g., 8080) and “Bind to address” to “All interfaces”. This makes Burp accessible from your Android device.

  • Exporting the CA Certificate:

  • In Burp, go to `Proxy → Proxy Settings` and click Import / export CA certificate.

  • Select `Export → Certificate in DER format` and save the file (e.g., burp_cert.der).

  • Installing the Certificate on an Android Device/Emulator:

  • For a user certificate (basic HTTP), drag and drop the `.der` file onto the Genymotion emulator display.
  • Go to `Android Settings` and search for “install a certificate”. Select `Install certificates from SD Card` and choose the `burp_cert.der` file from /sdcard/Download.

  • To intercept HTTPS traffic on Android 7+ and bypass certificate pinning, the certificate must be installed as a system CA. This requires a rooted device and often the use of a Magisk module like Cert-Fixer.

  • Setting the Global Proxy:

  • On Genymotion, use ADB to set the global proxy: adb shell settings put global http_proxy <burp_ip>:<burp_port>. For example, if Burp is running on the host machine with IP `192.168.1.84` on port 8080, the command is adb shell settings put global http_proxy 192.168.1.84:8080.
  • If Burp and Genymotion are on the same machine using VirtualBox, the IP `10.0.3.2` can be used to reach the host.

4. Frida — Dynamic Instrumentation for Runtime Manipulation

Frida is a dynamic instrumentation toolkit that allows you to inject JavaScript into running Android applications. This is used for bypassing security controls, tracing function calls, and extracting runtime secrets.

Step‑by‑step guide:

  • Setup:
  • Install Frida tools on your host machine: pip install frida-tools.
  • Download the matching `frida-server` binary for your Android architecture from the Frida releases page.
  • Push `frida-server` to the device and run it: 
    adb root
adb push frida-server /data/local/tmp/
adb shell chmod 755 /data/local/tmp/frida-server
adb shell /data/local/tmp/frida-server &
  • Verify the setup: `frida-ps -U` (lists processes) or `frida-ps -Uai` (lists installed apps).

  • Bypassing Root Detection with Frida:

  • Create a Frida script (e.g., bypass_root.js) to hook the methods responsible for root detection. Common targets include `File.exists()` for checking for su, Runtime.exec(), and native checks in `.so` libraries.
  • Example script to bypass a PIN check: 
    Java.perform(function () {
var PinUtil = Java.use("infosecadventures.fridademo.utils.PinUtil");
PinUtil.checkPin.implementation = function (pin) {
console.log("[+] PIN check bypassed!");
return true;
}
});

  • Run the script against the target app: frida -U -f com.example.app -l bypass_root.js. The `-f` flag spawns the app, and `-l` loads the script.

  • Advanced Frida Usage:

  • For SSL pinning bypass, use scripts like ssl-bypass.js.
  • To bypass root detection in both Java and native layers, a script like `bypass_native.js` can be used to hook functions within `libc` and the app’s own native libraries.

5. Genymotion — The Android Security Testing Environment

Genymotion is a fast Android emulator that is ideal for security testing due to its ease of use and support for rooted virtual devices.

Step‑by‑step guide:

  • Setup and Rooting:
  • Install Genymotion and create a virtual device.
  • For Android 14+ images, root the device by following the Genymotion documentation.

  • Integrating with ADB and Burp Suite:

  • ADB is automatically connected to the running Genymotion device.

  • As detailed in the Burp Suite section, install the Burp CA certificate and set the global proxy via ADB.

  • Using Genymotion with Frida:

  • Push and run `frida-server` on the Genymotion device as described above. The rooted environment allows Frida to attach to any process.

What Undercode Say:

  • Key Takeaway 1: Android security is a multi-layered discipline that demands proficiency in both static and dynamic analysis. Tools like JADX and Frida are not just optional—they are essential for uncovering hidden vulnerabilities and understanding an application’s true behavior.
  • Key Takeaway 2: The real power of these tools lies in their integration. A seamless workflow—from decompiling with JADX, to intercepting traffic with Burp Suite, to bypassing protections with Frida on a Genymotion emulator—allows for a comprehensive security assessment that mirrors the techniques used by real-world attackers.

Prediction:

  • +1 The increasing sophistication of mobile malware and the growing reliance on mobile applications for sensitive transactions will drive a surge in demand for skilled Android security professionals. Mastery of tools like ADB, Frida, and Burp Suite will become a baseline requirement for security roles.
  • +1 We can expect to see further integration of AI into these tools, automating aspects of code analysis and vulnerability discovery, thereby accelerating the security testing process.
  • -1 As security tools become more powerful and accessible, the barrier to entry for malicious actors also lowers. This will lead to an increase in the number and complexity of attacks targeting mobile applications, particularly those that rely on weak client-side security controls.
  • -1 The cat-and-mouse game between security researchers and developers will intensify. We will see more sophisticated anti-tampering and anti-debugging techniques, such as advanced obfuscation and runtime self-protection, making the work of ethical hackers more challenging and requiring constant learning and adaptation.

▶️ Related Video (80% Match):

https://www.youtube.com/watch?v=0rz8KbhwR6s

🎯Let’s Practice For Free:

🎓 Live Courses & Certifications:

Join Undercode Academy for Verified Certifications

🚀 Request a Custom Project:

Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands

IT/Security Reporter URL:

Reported By: https://lnkd.in/p/e4upQQkf – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]

💬 Whatsapp | 💬 Telegram

📢 Follow UndercodeTesting & Stay Tuned:

𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky

Related Posts: