I Reverse Engineered an Android App With Permission. Here's What I Learned.

Notes from an authorized Android app test: pulling the APK, mapping a Flutter API, decoding BLE, and finding an authz gap.