From Concept to Practice

Each lesson combines clear theory with hands-on labs and demos. This way, you can apply your skills right away.

Learn from Experience

Learn from years of real-world security testing and avoid the common mistakes that slow down new Android testers.

7-Day Refund Guarantee

Full refund within 7 days if you’ve accessed less than 10% of the course content.

Build a Strong Foundation

Learn the key Android security topics you’ll need for engagements and bug bounties. 

Learn by Doing

Practice on provided APKs and source code. Analyze, exploit, and validate real issues.

Lifetime Access

Access every lesson and future course update at any time, and learn at your own pace.

Stop piecing together Android security knowledge from scattered sources

→ Preparing for a mobile pentest but unsure where to begin? → Learning isolated techniques without a clear process? → Struggling to turn theory into practical testing skills? Android security can feel overwhelming when tutorials assume too much, skip key fundamentals, or teach techniques without explaining when and why to use them. I built this course to provide the structured path I wish I had earlier in my career. You will learn how Android vulnerabilities arise, how to identify them, and how to validate them through practical labs and working proof-of-concepts.

Curriculum

7 Chapters · 55 Lessons

  1. 1
    1. Welcome & Course Overview Free preview
    2. Android Lab Setup Free preview
    3. (Included in full purchase)

      Other Tools and Project Files

    4. (Included in full purchase)

      Quiz 1: Introduction Quiz

  2. 2
    1. (Included in full purchase)

      Android Architecture

    2. (Included in full purchase)

      Android Components

    3. (Included in full purchase)

      Android Manifest

    4. (Included in full purchase)

      Intents

    5. (Included in full purchase)

      Quiz 2: Android Security Essentials

    6. (Included in full purchase)

      Files, Directories and User Permissions

    7. (Included in full purchase)

      Common Linking Mechanism

    8. (Included in full purchase)

      Attack Vectors

    9. (Included in full purchase)

      Creating Proof of Concepts

    10. (Included in full purchase)

      Quiz 3: Android Security Essentials

  3. 3
    1. (Included in full purchase)

      Insecure Data Storage

    2. (Included in full purchase)

      Insecure Permissions

    3. (Included in full purchase)

      Accessing Protected Components

    4. (Included in full purchase)

      Hijacking Implicit Intents (Broadcast Receiver)

    5. (Included in full purchase)

      Hijacking Implicit Intents (Activities)

    6. (Included in full purchase)

      Quiz 4: Components Exploitation

    7. (Included in full purchase)

      Pending Intents

    8. (Included in full purchase)

      Hijacking Pending Intents

    9. (Included in full purchase)

      Exploiting Deep Links

    10. (Included in full purchase)

      Exploiting Zip Slip

    11. (Included in full purchase)

      Quiz 5: Components Exploitation

  4. 4
    1. (Included in full purchase)

      WebView Basics and Attack Surface

    2. (Included in full purchase)

      Stealing Files via File URLs

    3. (Included in full purchase)

      Exploiting JavaScript Interfaces

    4. (Included in full purchase)

      Quiz 6: WebView Quiz

    5. (Included in full purchase)

      Universal Cross Site Scripting

    6. (Included in full purchase)

      Cookie Tainting Exploit

    7. (Included in full purchase)

      Abusing Unsafe Internal URL Handling

    8. (Included in full purchase)

      Quiz 7: WebView Quiz

  5. 5
    1. (Included in full purchase)

      Installing Burp CA Certificates - Android 8-9

    2. (Included in full purchase)

      Installing Burp CA Certificates - Android 10+

    3. (Included in full purchase)

      Network Environment Setup

    4. (Included in full purchase)

      Same WIFI Network Setup

    5. (Included in full purchase)

      Hotspot Network Setup

    6. (Included in full purchase)

      ProxyDroid and Network Setup Recap

    7. (Included in full purchase)

      Quiz 8: Network Exploitation

    8. (Included in full purchase)

      Certificate Validation Flaws

    9. (Included in full purchase)

      Certificate Validation Flaws (Demo)

    10. (Included in full purchase)

      Network Security Config XML

    11. (Included in full purchase)

      Bypassing SSL Pinning

    12. (Included in full purchase)

      SSL Pinning Bypass with Automated Tools

    13. (Included in full purchase)

      Bypassing SSL Pinning in Android Native Libraries

    14. (Included in full purchase)

      Quiz 9: Network Exploitation

  6. 6
    1. (Included in full purchase)

      Frida Essential

    2. (Included in full purchase)

      Hooking Methods with Frida

    3. (Included in full purchase)

      Exposing Hidden Methods with Frida

    4. (Included in full purchase)

      Hooking Native Code with Frida

    5. (Included in full purchase)

      [BONUS] AI-Assisted Android Reverse Engineering (Coming)

    6. (Included in full purchase)

      Quiz 6: Reverse Engineering

  7. 7
    1. (Included in full purchase)

      Wrap Up and Next Steps

    2. (Included in full purchase)

      Course Feedback & Learning Experience Survey

Testimonials

 

”
★★★★★ "The most systematic Android security course I’ve seen online." "Courses on Android app security are scarce, but this one fills the gap. The hands-on labs help you build practical skills in discovering and exploiting Android app vulnerabilities."
En He

Android Security Researcher (China)

”
★★★★★ "A great course for learning Android app hacking!" "The course starts with a solid technical foundation and quickly moves into practical techniques, with clear video and text instructions that make everything easy to follow."
Chris Moberly

Red Team Leader (Australia)

”
★★★★★ "The best Android security course I've taken." "I thought I'd already know most of it - I was wrong. Each lesson covers the theory thoroughly with source code and APK files to practice with. The dynamic analysis section was the best, especially the frida-trace coverage which is rarely talked about elsewhere. Can't wait for more advanced topics to come."
Bryan Matthew

Junior Pentester (Indonesia)

”
★★★★★ "I've gained a ton of value before even finishing the course." "Coming from a web testing background and new to Android security, the practical techniques have been super useful."
Martin J.

Security Consultant (New Zealand)

”
★★★★★ "Really enjoying the course. I like the simple vulnerable apps paired with quick, clear PoCs. It makes everything easy to understand and apply."
Aurelien Salomon 

Senior Consultant (Australia)

Is This Training Right For You?

Who This Training Is For: ✅ Bug bounty hunters expanding into mobile security ✅ Web pentesters moving into Android testing ✅ Security engineers learning Android internals ✅ Developers who want to understand real app vulnerabilities Who This Training Is NOT For: 🚫 Complete beginners with no programming background 🚫 People looking for theory-only security courses

Meet Your Instructor

Richard, also known as sambal0x, has more than nine years of experience as a professional penetration tester and bug bounty hunter. He has been recognised as a top contributor to the Google Play Security Reward Program and has a strong interest in Android application security and reverse engineering. Known for his methodical approach, Richard enjoys breaking down complex security concepts into clear, practical techniques. Certifications: OSCP, OSCE, GXPN, CRTO, GCPN, CISSP

Ready to Master Android App Hacking?

Start your first hands-on Android security lab today.

$149.00

             Enroll now                             Free preview