APK Analysis

APKTool

sudo apt install -y apktool

apktool d -o decompiled_apk file.apk

A good place to start looking for information is in ./decompiled_apk/res/values/strings.xml

grep -ilar passw decompiled_apk

Recursively search for passw in the output directory; could also look for API keys, secrets, etc.

grep -ilar 'domain\.tld' decompiled_apk

Recursively search for domain names in the output directory

sudo apt install -y jd-gui jadx

jadx-gui &

The search function is very handy for finding interesting strings in the source code