From Concept to Practice

Each lesson combines clear theory with hands-on labs and demos. This way, you can apply your skills right away.

Learn from Experience

Learn from years of real security testing. This helps you dodge common mistakes and grow quicker.

7-Day Refund Guarantee

Full refund within 7 days if you’ve accessed less than 10% of the course content.

Build a Strong Foundation

Learn the key Android security topics you’ll need for engagements and bug bounties. 

Learn by Doing

Practice on provided APKs and source code. Analyze, exploit, and validate real issues.

Lifetime Access

Access all lessons and future updates anytime - Learn at your own pace

Stop wasting time piecing together Android hacking knowledge.

⚡ Scheduled for a mobile pentest but feel unprepared? ⚡ Learning bits and pieces from scattered sources? ⚡ Not sure where to start? I faced the same challenges early in my career as a penetration tester and bug bounty hunter - scattered resources, no clear starting point, an Android ecosystem that felt too big to tackle alone. I built this course to help others skip that. After completing it, you'll know where to look and how to find high-impact vulnerabilities - not just what shows up in a proxy, but what's actually happening inside the app, so you can find the bugs that actually pay off. See the full curriculum below ↓

Curriculum

7 Chapters · 55 Lessons

  1. 1
    1. Welcome & Course Overview Free preview
    2. Android Lab Setup Free preview
    3. (Included in full purchase)

      Other Tools and Project Files

    4. (Included in full purchase)

      Quiz 1: Introduction Quiz

  2. 2
    1. (Included in full purchase)

      Android Architecture

    2. (Included in full purchase)

      Android Components

    3. (Included in full purchase)

      Android Manifest

    4. (Included in full purchase)

      Intents

    5. (Included in full purchase)

      Quiz 2: Android Security Essentials

    6. (Included in full purchase)

      Files, Directories and User Permissions

    7. (Included in full purchase)

      Common Linking Mechanism

    8. (Included in full purchase)

      Attack Vectors

    9. (Included in full purchase)

      Creating Proof of Concepts

    10. (Included in full purchase)

      Quiz 3: Android Security Essentials

  3. 3
    1. (Included in full purchase)

      Insecure Data Storage

    2. (Included in full purchase)

      Insecure Permissions

    3. (Included in full purchase)

      Accessing Protected Components

    4. (Included in full purchase)

      Hijacking Implicit Intents (Broadcast Receiver)

    5. (Included in full purchase)

      Hijacking Implicit Intents (Activities)

    6. (Included in full purchase)

      Quiz 4: Components Exploitation

    7. (Included in full purchase)

      Pending Intents

    8. (Included in full purchase)

      Hijacking Pending Intents

    9. (Included in full purchase)

      Exploiting Deep Links

    10. (Included in full purchase)

      Exploiting Zip Slip

    11. (Included in full purchase)

      Quiz 5: Components Exploitation

  4. 4
    1. (Included in full purchase)

      WebView Basics and Attack Surface

    2. (Included in full purchase)

      Stealing Files via File URLs

    3. (Included in full purchase)

      Exploiting JavaScript Interfaces

    4. (Included in full purchase)

      Quiz 6: WebView Quiz

    5. (Included in full purchase)

      Universal Cross Site Scripting

    6. (Included in full purchase)

      Cookie Tainting Exploit

    7. (Included in full purchase)

      Abusing Unsafe Internal URL Handling

    8. (Included in full purchase)

      Quiz 7: WebView Quiz

  5. 5
    1. (Included in full purchase)

      Installing Burp CA Certificates - Android 8-9

    2. (Included in full purchase)

      Installing Burp CA Certificates - Android 10+

    3. (Included in full purchase)

      Network Environment Setup

    4. (Included in full purchase)

      Same WIFI Network Setup

    5. (Included in full purchase)

      Hotspot Network Setup

    6. (Included in full purchase)

      ProxyDroid and Network Setup Recap

    7. (Included in full purchase)

      Quiz 8: Network Exploitation

    8. (Included in full purchase)

      Certificate Validation Flaws

    9. (Included in full purchase)

      Certificate Validation Flaws (Demo)

    10. (Included in full purchase)

      Network Security Config XML

    11. (Included in full purchase)

      Bypassing SSL Pinning

    12. (Included in full purchase)

      SSL Pinning Bypass with Automated Tools

    13. (Included in full purchase)

      Bypassing SSL Pinning in Android Native Libraries

    14. (Included in full purchase)

      Quiz 9: Network Exploitation

  6. 6
    1. (Included in full purchase)

      Frida Essential

    2. (Included in full purchase)

      Hooking Methods with Frida

    3. (Included in full purchase)

      Exposing Hidden Methods with Frida

    4. (Included in full purchase)

      Hooking Native Code with Frida

    5. (Included in full purchase)

      [BONUS] AI-Assisted Android Reverse Engineering (Coming)

    6. (Included in full purchase)

      Quiz 6: Reverse Engineering

  7. 7
    1. (Included in full purchase)

      Wrap Up and Next Steps

    2. (Included in full purchase)

      Course Feedback & Learning Experience Survey

Testimonials

 

”
★★★★★ "The most systematic Android security course I’ve seen online." "Courses on Android app security are scarce, but this one fills the gap. The hands-on labs help you build practical skills in discovering and exploiting Android app vulnerabilities."
En He

Android Security Researcher (China)

”
★★★★★ "A great course for learning Android app hacking!" "The course starts with a solid technical foundation and quickly moves into practical techniques, with clear video and text instructions that make everything easy to follow."
Chris Moberly

Red Team Leader (Australia)

”
★★★★★ "The best Android security course I've taken." "I thought I'd already know most of it - I was wrong. Each lesson covers the theory thoroughly with source code and APK files to practice with. The dynamic analysis section was the best, especially the frida-trace coverage which is rarely talked about elsewhere. Can't wait for more advanced topics to come."
Bryan Matthew

Junior Pentester (Indonesia)

”
★★★★★ "I've gained a ton of value before even finishing the course." "Coming from a web testing background and new to Android security, the practical techniques have been super useful."
Martin J.

Security Consultant (New Zealand)

”
★★★★★ "Really enjoying the course. I like the simple vulnerable apps paired with quick, clear PoCs. It makes everything easy to understand and apply."
Aurelien Salomon 

Senior Consultant (Australia)

Is This Training Right For You?

Who This Training Is For: ✅ Bug bounty hunters expanding into mobile security ✅ Web pentesters moving into Android testing ✅ Security engineers learning Android internals ✅ Developers who want to understand real app vulnerabilities Who This Training Is NOT For: 🚫 Complete beginners with no programming background 🚫 People looking for theory-only security courses

Meet Your Instructor

Richard, also known as sambal0x, has spent over 9 years hunting bugs and vulnerabilities as a professional pentester, with a spot on the Google Play Security Reward Program's top contributors list and speaking credits at a security conference. This course has been taken by working Security Consultants, Pentesters, and Android Security Researchers. They came in solid on web and left dangerous on Android. Every lesson pairs real vulnerable apps and working proof-of-concepts with the reasoning behind each technique, so you actually understand how Android apps break, not just which tool to run. Certifications: OSCP, OSCE, GXPN, CRTO, GCPN, CISS

Ready to Master Android App Hacking?

Start your first hands-on Android security lab today.

$149.00

             Enroll now                             Free preview