@RohanDurve-Decode141 well they have the android drozer thing they do
labs.mwrinfosecurity.com/tools/drozer also had a really nice vuln recently where injected javascript gets access to a java bridge and executed with the privs of the running application