androidpenetration-testingpenetration-tools

What is the best tool for pen testing android app

What is the best tool for pen testing android app? I want to connect the device to my PC, launch the app in my android device, execute different functions of the app and pen test the app using pen testing tools in my PC. I don't want to use any kind of emulator. What is the best approach to pen test in this way? Can I do it in Kali Linux platform? Any kind of suggestion for tools or anything would be helpful.

Thank You.

Solution

  • First learn about adb commands for connect the device to your PC. So that you can launch app in your device. Yes you can use Kali linux.
    Then go for these tools,

    1. BurpSuite Pro (for proxy intercept , etc)

    2. Drozer

    3. dex2jar

    4. AppWatch by Attify.com

    5. AndroBugs

    6. MobSF

    7. JD-Gui (for analyzing source code)

    8. apktool

    Each tool has its own specialty.

    These are the latest tools you can use for android penetration testing