Reverse Engeneering

I am following a course about reverse enegeneering and writing exploits. In that course you use gdb and protostar and you have to disassemble small programs in C, find a vulnerability and write an exploit in python.

I have a question, if I want do find a vulnerability in an app, for example Instagram or other app in Android, how can I do it?