android-frida-pentest

name	android-frida-pentest
description	Android app pentesting with Frida - use this skill whenever you need to hook Java methods, bypass root checks, debugger detection, or decrypt data in Android apps. Trigger this for any Android security testing, APK analysis, OWASP MSTG challenges, or when you want to intercept cryptographic operations, root detection, or debugger checks in Android applications.

Android Frida Pentesting Skill

A skill for performing Android application security testing using Frida dynamic instrumentation. This skill helps you hook Java methods, bypass security checks, and extract sensitive data from Android apps.

When to Use This Skill

Use this skill when you need to:

• Hook and intercept Java method calls in Android apps
• Bypass root detection checks
• Bypass debugger detection
• Decrypt data using hooked cryptographic functions
• Test OWASP MSTG crackme challenges
• Perform dynamic analysis on Android APKs
• Use Frida, Objection, or frida-trace for Android pentesting

Prerequisites

Before using this skill, ensure you have:

• A rooted Android device or emulator
• Frida installed (pip install frida-tools)
• ADB connected to your device
• The target APK installed on the device
• For Android 14+: Use spawn mode (-f) due to seccomp-bpf restrictions

Quick Start

1. Install Frida on Device

# Download frida-server for your device architecture
adb push frida-server-16.1.0-android-arm64 /data/local/tmp/frida-server
adb shell chmod 755 /data/local/tmp/frida-server
adb shell /data/local/tmp/frida-server &

2. Verify Connection

frida-ps -U