Static testing

Source code review

Dynamic Testing

Modify the application runtime or functionality while the app is running, this usually done by injecting a library into the process. Then we can change the app as we desire, view what's going on behind the scenes, bypass security restrictions and more.

How? Frida and Objection are the most popular tools.