A company requested a penetration tester review the security of an in-house developed Android application. The penetration tester received an APK file to support the assessment. The penetration tester wants to run SAST on the APK file. Which of the following preparatory steps must the penetration tester do FIRST? (Select TWO).
A) Convert to JAR.
B) Decompile.
C) Cross-compile the application.
D) Convert JAR files to DEX.
E) Re-sign the APK.
F) Attach to ADB.

Question

Quizplus · Accepted Answer

To perform SAST (Static Application Security Testing) on an APK file, the penetration tester must first decompile the APK to access the source code, and then convert the decompiled code into a JAR file for analysis.

A Company Requested a Penetration Tester Review the Security of an In-House