Hacker News Reader

I liked this guide on reversing Android. https://www.evilsocket.net/2017/04/27/Android-Applications-R...

CharlesProxy is a must-have whether you're a dev or reverse-engineering.

JADX is the best for reversing Android because it produces readable Android code which is fantastic for current Android developers who expect things to be organized like Android Studio.

Use http://www.telerik.com/fiddler or https://www.charlesproxy.com or https://mitmproxy.org

If they pin certs it can be harder but not impossible.

Xposed Framework module to disable SSL cert pinning https://github.com/Fuzion24/JustTrustMe

I gave an intro of sorts here for iOS: https://news.realm.io/news/conrad-kramer-reverse-engineering...

https://www.nccgroup.trust/us/about-us/newsroom-and-events/b... is a good start. You can do some fun stuff once you can see/proxy/modify requests.

If you want to get started, start by poking at something simple (e.g. your own app). Then google as you run into specific issues.