Field Guide to the Android Manifest File

This post outlines how to decompile and analyze an Android app’s `AndroidManifest.xml` (via Apktool) to assess security posture, using TikTok as a case study; it explains what package names, app flags (e.g., `android:allowBackup`, `android:debuggable`), permissions, `uses-feature` tags, and component declarations (activities, services, receivers with `intent-filters` and `android:exported`) reveal about attack surface and misconfigurations, and demonstrates identifying functions like push-notification handling from manifest entries.