StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

Spotify updated their player, I'm sure they don't encrypt their mp3's with the player so you could just modify this and get it to work.

Code and slides for Zer0Con 2018 talk: Building a 1-day Exploit for Google Chrome