> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/android-appsec/fundamenteals/introduction.md).

# Introduction

**Android** is an ***open-source operating*** system designed primarily for ***touchscreen mobile*** devices such as **smartphones** and **tablets**. It offers a customizable user interface, multitasking capabilities, etc.

***

## **Android penetration testing**

Android penetration testing is the process of evaluating the security of an Android application or device by identifying and exploiting vulnerabilities that could be exploited by attackers. This type of testing helps ensure that Android apps are secure and can resist various types of attacks.

Mobile penetration testers use a variety of techniques and tools to assess the security of Android apps. This may include **static analysis** to examine the code for vulnerabilities, **dynamic analysis** to test the app’s behaviour in real-time and reverse engineering to understand how the app works and identify potential vulnerabilities.

***

#### Reference

{% embed url="<https://medium.com/@srkasthuri/android-pentesting-101-a-novices-handbook-to-getting-started-8f56f877f418>" %}

{% embed url="<https://www.hackthebox.com/blog/intro-to-mobile-pentesting>" %}