Skill UI

Exercises deep link exploitation workflows on Android and iOS mobile apps to discover unauthorized access, injection, hijacking, and redirect flaws by inspecting URI schemes, App/Universal Links, intent filters, and WebView loads; intended for penetration testing of mobile attack surfaces.

Identifies and exploits insecure local data storage across Android and iOS, covering SharedPreferences, SQLite, keychain/keystore misuse, backups, and memory artifacts to support OWASP M9-focused mobile penetration testing.

Automates MobSF-based static scanning of Android APK/AAB files to flag hardcoded secrets, weak crypto, manifest misconfigurations, and insecure components, making it suitable for pre-release QA, CI/CD gates, and penetration testing triage.

Performs runtime dynamic analysis of Android applications with Frida, Objection, and ADB, letting you hook sensitive methods, inspect decrypted data, and detect runtime vulnerabilities missed by static scans during penetration tests or security research.

Uses JADX to decompile Android APKs, inspect manifests, permissions, and Java/Kotlin sources, identify data theft, C2, overlays, and other malicious traits, and guide analysts through a step-by-step mobile malware investigation workflow.

Assesses Android exported components using Drozer, ADB, and Frida to uncover intent injection, unauthorized access, broadcast sniffing, pending intent hijacking, and content provider leakage in IPC flows.

Executes a structured VC valuation workflow that ingests SaaS or startup metrics, runs DCF, comparable revenue multiples, and SaaS health models via Python, and synthesizes a defensible valuation, runway, and capital-efficiency narrative for users planning fundraising or benchmarking.