See apk permissions:
aapt l -a app.apk
Convert Android xml to xml using androguard:
androaxml -i content/AndroidManifest.xml
Check certificates:
keytool -printcert -file contents/META-INF/CERT.RSA
Decompile with androguard :
androdd.py -i FILENAME.apk -o OUTPUT_DIR
Decompile with jadx:
jadx -d out classes.dex
Compare two APK with androguard :
Androsim.py -i FILENAME_1.apk FILENAME_2.apk -c ZLIB -n
apktool d app.apk
mv app.apk app.zip
unzip app.zip
dex2jar classes.dex
.... now...
unzip classes_dex2jar.jar
jad -s java *.class
... or ....
open jar file in JD-GUI