https://crusaderproxy.com/research/en/tags/apk/ Recent content in Apk on Crusader Research Hugo en-US Sun, 05 Jul 2026 00:00:00 +0000 https://crusaderproxy.com/research/en/posts/reading-the-apk-static-analysis/ Sun, 05 Jul 2026 00:00:00 +0000 https://crusaderproxy.com/research/en/posts/reading-the-apk-static-analysis/ <p>Most mobile write-ups treat static analysis as the boring prelude — decompile, skim, &ldquo;note any hardcoded secrets,&rdquo; then get to the real work of intercepting traffic. That framing is why testers miss criticals that were sitting in a zip file the whole time. The dynamic pass only shows you what the app does <em>while you drive it</em>. The static pass shows you the endpoints behind feature flags, the components every other app on the device can reach, and the one Firebase URL that turns into a report before you&rsquo;ve opened a proxy.</p>