So now you're in.
Now what?
This is probably the most popular question
I get from students.
So what am I going to look for?
On the left-hand side, these are key things
we want you to focus on.
So activities-- can you tell what
it's supposed to do versus the services that are actually
running in the background?
What I would do is just keyword search in JADX for services.
Look at what it's actually doing in the background versus what
the user may think it's doing.
So the app you're looking at is called battery.extender.
You would think it's something that
maybe kills things in the background to save your battery
or checks your battery.
So check what services are running in the background.
Broadcast Receivers-- so what intents does it have access
to--
your contacts, your call logs, things like that?
What are the requested permissions?
So when it actually asks for permissions, what are they,
and what did the user actually grant the permissions to?
And you can see on the right-hand side,
we're looking at AndroidManifest.xml.
That is the first place you should start.