Build a Strong Foundation

Learn the key Android security topics you’ll need for engagements and bug bounties. 

Learn by Doing

Practice on provided APKs and source code. Analyze, exploit, and validate real issues.

No Fluff, Maximum Focus

More than 6 hours of structured lessons. Each module offers real value, with no fluff.

From Concept to Practice

Each lesson combines clear theory with hands-on labs and demos. This way, you can apply your skills right away.

Learn from Experience

Learn from years of real security testing. This helps you dodge common mistakes and grow quicker.

7-Day Refund Guarantee

Full refund within 7 days if you’ve accessed less than 10% of the course content.

About the Course

Looking to level up your Android pentesting or bug bounty skills? Android App Hacking Mastery is a hands-on, structured course designed for security professionals and aspiring bug bounty hunters. You’ll analyse realistic demo apps, uncover vulnerabilities, and create working proofs of concept, using techniques applied by experts in bug bounty programs and professional security testing. By the end of the course, you’ll have the practical expertise and confidence to discover, analyse, and exploit Android app security flaws, giving you the skills to excel in bug bounty programs or professional penetration testing.  

Curriculum

7 Chapters · 55 Lessons

  1. 1

    Introduction to Android App Security

    1. Welcome & Course Overview Free preview
    2. (Included in full purchase)

      Android Lab Setup

    3. (Included in full purchase)

      Other Tools and Project Files

    4. (Included in full purchase)

      Quiz 1: Introduction Quiz

  2. 2

    Android Security Essentials

    1. (Included in full purchase)

      Android Architecture

    2. (Included in full purchase)

      Android Components

    3. (Included in full purchase)

      Android Manifest

    4. (Included in full purchase)

      Intents

    5. (Included in full purchase)

      Quiz 2: Android Security Essentials

    6. (Included in full purchase)

      Files, Directories and User Permissions

    7. (Included in full purchase)

      Common Linking Mechanism

    8. (Included in full purchase)

      Attack Vectors

    9. (Included in full purchase)

      Creating Proof of Concepts

    10. (Included in full purchase)

      Quiz 3: Android Security Essentials

  3. 3

    Components Exploitation

    1. (Included in full purchase)

      Insecure Data Storage

    2. (Included in full purchase)

      Insecure Permissions

    3. (Included in full purchase)

      Accessing Protected Components

    4. (Included in full purchase)

      Hijacking Implicit Intents (Broadcast Receiver)

    5. (Included in full purchase)

      Hijacking Implicit Intents (Activities)

    6. (Included in full purchase)

      Quiz 4: Components Exploitation

    7. (Included in full purchase)

      Pending Intents

    8. (Included in full purchase)

      Hijacking Pending Intents

    9. (Included in full purchase)

      Exploiting Deep Links

    10. (Included in full purchase)

      Exploiting Zip Slip

    11. (Included in full purchase)

      Quiz 5: Components Exploitation

  4. 4

    WebView Exploitation

    1. (Included in full purchase)

      WebView Basics and Attack Surface

    2. (Included in full purchase)

      Stealing Files via File URLs

    3. (Included in full purchase)

      Exploiting JavaScript Interfaces

    4. (Included in full purchase)

      Quiz 6: WebView Quiz

    5. (Included in full purchase)

      Universal Cross Site Scripting

    6. (Included in full purchase)

      Cookie Tainting Exploit

    7. (Included in full purchase)

      Abusing Unsafe Internal URL Handling

    8. (Included in full purchase)

      Quiz 7: WebView Quiz

  5. 5

    Network Exploitation

    1. (Included in full purchase)

      Installing Burp CA Certificates - Android 8-9

    2. (Included in full purchase)

      Installing Burp CA Certificates - Android 10+

    3. (Included in full purchase)

      Network Environment Setup

    4. (Included in full purchase)

      Same WIFI Network Setup

    5. (Included in full purchase)

      Hotspot Network Setup

    6. (Included in full purchase)

      ProxyDroid and Network Setup Recap

    7. (Included in full purchase)

      Quiz 8: Network Exploitation

    8. (Included in full purchase)

      Certificate Validation Flaws

    9. (Included in full purchase)

      Certificate Validation Flaws (Demo)

    10. (Included in full purchase)

      Network Security Config XML

    11. (Included in full purchase)

      Bypassing SSL Pinning

    12. (Included in full purchase)

      SSL Pinning Bypass with Automated Tools

    13. (Included in full purchase)

      Bypassing SSL Pinning in Android Native Libraries

    14. (Included in full purchase)

      Quiz 9: Network Exploitation

  6. 6

    Reverse Engineering and Runtime Analysis

    1. Frida Essential Free preview
    2. (Included in full purchase)

      Hooking Methods with Frida

    3. (Included in full purchase)

      Exposing Hidden Methods with Frida

    4. (Included in full purchase)

      Hooking Native Code with Frida

    5. (Included in full purchase)

      [BONUS] AI-Assisted Android Reverse Engineering (Coming)

    6. (Included in full purchase)

      Quiz 6: Reverse Engineering

  7. 7

    Course Wrap Up

    1. (Included in full purchase)

      Wrap Up and Next Steps

    2. (Included in full purchase)

      Course Feedback & Learning Experience Survey

Student Testimonials

Real feedback from students learning Android app hacking

”
Compared to web security, resources on vulnerability discovery for Android apps have historically been scattered, and courses are relatively scarce. Richard's course fills this gap. I believe it is the most systematic and comprehensive course on Android app security I’ve seen online, covering the latest trends in vulnerability discovery. With the course and its lab exercises, learners can gain strong practical skills in identifying and exploiting Android app vulnerabilities.
En He

Android Security Researcher

This course was a great introduction to hacking Android apps. I like the technical foundation it starts with, which was a good refresher (or a great intro if you are brand new). It then quickly moved into practical techniques - well laid out, clearly explained, and really easy to follow along with the combo of video and text instructions. Really nice way to get moving quickly with mobile app exploitation.
Chris Moberly

Red Team Leader

”
As someone relatively new to Android security but experienced in web testing, I've gained a ton of value from this course... and I'm only halfway through!
Minsik

Security Consultant

Meet Your Instructor

Richard (aka sambal0x) has spent over 8 years hunting bugs and vulnerabilities as a professional pentester and even made it onto the Google Play Security Reward Program top contributors list. Passionate about Android security, he helps students gain the skills, techniques, and confidence to explore apps, find vulnerabilities, and understand real-world exploitation.

Ready to Master Android App Hacking?

Take the next step to enhance your skills and secure your future in app security.

$149.00

Enroll Now Free preview