Offensive Android Internals – eLearning

Learn how Android works beneath the surface and develop practical skills in reverse engineering, vulnerability research, and exploitation of security weaknesses.

Order e-learning course here

The course provides a detailed introduction to the internal architecture of Android. You will explore the Android Open Source Project, the boot process, IPC mechanisms, ARM64 assembly and platform-specific security features.

Through practical exercises and real-world examples, you will learn to reverse engineer Android applications and system files, analyse vulnerabilities and gain a deeper understanding of security at both userland and kernel level.

What will you gain from the course?

  • Understand Android architecture and the AOSP source code
  • Explore the Android boot process and rooting
  • Understand Binder IPC
  • Perform crash analysis on Android
  • Develop skills in ARM reverse engineering
  • Understand ARM64 architecture
  • Prepare Android operating systems and kernels for vulnerability research
  • Explore Android permissions and security mechanisms
  • Reverse engineer applications and system files
  • Analyse public exploits and real-world vulnerabilities
  • Work with JNI bindings and runtime instrumentation
  • Use fuzzing to identify crashes and vulnerabilities

 Who is the course for?

The course is suitable for vulnerability researchers, malware analysts, penetration testers, mobile developers and others who want to understand how Android devices and applications work and are secured.

The course is at a beginner to intermediate level.

Prerequisites

You should have:

  • Basic knowledge of Android
  • Basic Linux skills and experience with the command line
  • An understanding of basic programming concepts in Java, Kotlin, C, C++ or a similar language

Basic knowledge of ARM/AARCH64 assembly and exploit techniques is recommended, but not required.

Course content

  • Android architecture and the Android Open Source Project
  • Setting up devices, emulators and a security environment
  • The Android boot sequence, rooting and GKI
  • The Android file system, sandboxing and platform permissions
  • ARM64 architecture and assembly
  • Reverse engineering of Android applications and APK files
  • Smali, Apktool and analysis of obfuscated code
  • Crash analysis, debugging and memory management
  • The Android kernel and privilege escalation
  • Binder IPC and JNI
  • Runtime instrumentation with tools such as Frida
  • Fuzzing and analysis of real-world Android vulnerabilities