I would like to perform dynamic analysis on some android apps to check if these apps sending metadata with media files or not.

Ideas like the picture below:

Step 1: I prepared an image with metadata (location, time, etc.)

Step 2: I use an Android app to send the images on Step-1 and try to capture the sender bytes stream.

Step 3: Re-create the image from the bytes stream and check metadata.

I don't have much experience as a reverse engineer so please help me with some ideas or useful tools.

Thank you. enter image description here

  • I would recommend a rooted device, and mproxy for intercepting the communication. For installing the mproxy root CA certificate you need root permissions as described here docs.mitmproxy.org/stable/…
    – Robert
    Feb 27, 2023 at 19:44
  • @Robert. thank you. I will test now. Feb 27, 2023 at 20:41


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.