Students will set up an environment that makes it easy to test Android apps for common security flaws such as lack of binary protections, insecure data transmission, insecure file storage, and data exposure in logs and memory dumps. We will find and exploit real flaws in real financial apps including the Bank of America, Wells Fargo, TurboTax, and many more.