Android Dynamic Analysis
- Navigate the app and look into the logs with adb logcat.
- Dump memory from the application to check for insecurely stored secrets.
- Check local storage for files created at runtime - local databases and shared preferences as well.
- Intercept traffic with Burp (break SSL pinning if needed) and analyse the requests as if it was a web application.