Mobile CTF

Solve mobile CTF challenges by classifying the artifact type first, then choosing the narrowest extraction path before escalating to dynamic or native analysis.

When this skill applies

• Artifact is an APK, AAB, IPA, .ab (Android backup), DEX file, or mobile game binary.
• Challenge asks to find a flag, key, secret, PIN, or hidden data from a mobile app or device backup.
• Artifact contains images, SQLite databases, or SharedPreferences with embedded or encoded flag content.

Operating model

1. Classify artifact: APK | Android backup (.ab) | IPA | Unity game
2. Quick-win attempt: strings + grep flag{ on raw artifact
3. Static analysis path per artifact type
4. If flag not found: dynamic analysis (Frida/objection) or native reversing
5. Validate and submit