A bash script that provisions an Android pentest environment - adb, jadx, apktool, drozer, frida, Burp and more - with the manual steps for installing a Burp CA as a system-trusted certificate and running Drozer and Frida.

Explicit versus implicit intents, the intent-filter model and how the system resolves a match, why intent filters are not a security boundary, and an intent-redirection walkthrough against InsecureShop.

How Android activities work and where they go wrong: the activity lifecycle, launch modes, intent filters and the exported and protectionLevel attributes, followed by a Drozer walkthrough against InjuredAndroid and a hardening checklist.

A tour of what is inside an APK - the AndroidManifest, DEX bytecode, native libraries, assets and META-INF - plus the four Android components, the tooling used to reverse an APK, and the labs and references worth working through.