> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/android-appsec/static-analysis/checklist.md).

# Checklist

### Manifest File

* `android:allowBackup="true"` 
* `android:debuggable="true"`
* Check Exported Activities, Services, and Broadcast Receivers
  * `<service android:exported="false"</service>`
  * `<activity android:exported="true" </activity>`

### Check MinSDK Version

* CMD = `aapt dump badging <apk-file> | grep sdkVersion`

### Reference:

* <https://www.varutra.com/static-analysis-of-android-application/>