jdonsec.
  • Research
  • Essays
  • About
  • Contact

Mobile

Research & Findings

Mobile

What's Inside the APK: Finding Hardcoded Secrets in Android Apps

Android APKs are zip archives. Everything inside them — including secrets developers assumed were hidden — is one decompile away from being readable. A walkthrough of mobile recon methodology for extracting hardcoded credentials from production apps.

mobile android recon api-keys secrets apk-analysis
Apr 12, 2026
Medium

© 2026 jdonsec — All research conducted within authorized bug bounty programs.

  • GitHub
  • RSS