Further reading

• Fireline Android static analysis: http://magic.360.cn/en/index.html
• Android privacy scan (Androwarn): https://github.com/maaaaz/androwarn/
• Mobile Security Framework (MobSF): https://github.com/MobSF/Mobile-Security-Framework-MobSF/wiki/1.-documentation
• Quick Android review kit: https://github.com/linkedin/qark/
• AndroBugs framework: https://github.com/AndroBugs/AndroBugs_Framework
• OWASP mobile testing guide: https://legacy.gitbook.com/book/sushi2k/the-owasp-mobile-security-testing-guide
• JADX: https://github.com/skylot/jadx
• DEX2JAR: https://github.com/pxb1988/dex2jar
• Android Cuckoo Sandbox: http://cuckoo-droid.readthedocs.io/en/latest/
• Vulnerable APK—GoatDroid.APK: https://github.com/linkedin/qark/blob/master/tests/goatdroid.apk
• Vulnerable APK—InSecureBankv2.APK: https://github.com/dineshshetty/Android-InsecureBankv2
• Android APK Scan: https://github...