Mobile Security

Android Security Research Framework

Android posture assessment engine injecting Smali bytecode and intercepting API calls to audit Android 15 applications.

  • Smali
  • Android Internals
  • Python
  • Auditing
Android 15
Android OS Target
Multi-threaded
Instrument Loops
Direct Smali bytecode
Injection Pipeline

🔍 The Problem

Auditing compiled Android applications for compliance and runtime vulnerabilities is usually slow, requiring manual decompilation, code editing, and rebuilding.


💡 The Solution

I designed the Android Security Framework: an assessment engine that injects Smali bytecode directly into compiled packages, allowing real-time API call auditing and data intercepting during runtime.