Reverse Engineer APK

I have six production Android APKs that we own. ATTENTION FREELANCER WE OWN THESE APPS AND THIS OS FOR TESTING/security PURPOSES ONLY

We want to simply see if we missed any security features, right now the Apks read the device’s MAC address, leave zero placeholders for the owner profile, and rely on two native certificate pins.

I am fully authorised to test these applications and need help only with apps I am authorised to test. My main objective is to see if our Apks can be reverse engineered so we can patch those in the future . Once the mechanism is clear, I will decide myself whether to disable or refactor it, so the immediate task is discovery and clear documentation rather than a full bypass.

You will receive the APK files only and the GitHub for the installation builder that is on the original box, so the analysis must be carried out with your own lab setup (JADX, apktool, smali, Frida, or whichever reversing tools you prefer). Network sniffing, static analysis, and dynamic tracing are all acceptable—what matters is a repeatable method and clear findings.

Deliverables – all six APKs
• A concise technical report pinpointing the hardware-binding checks (method names, offsets, native libraries, cert-pinning routines, obfuscation layers).
• Annotated code snippets or smali excerpts that show the exact decision path.
• Brief recommendations on how to neutralise or strengthen the mechanism.

I will validate the work by following your steps on my own test boxes; if the checks are located and explained, the milestone is complete.