Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this community
So I've decompiled an APK and I believe that I have now is the source code (most with a bunch of random variables and method names, but from what I've read this is completely normal)
the app in question uses a signature in the registration request that changes everytime, this signature is not received from any request preceding it so I assume the only way to find out how this is being generated is through the APK. Do you guys have any direction on where exactly I should be looking?
The signature is likely a hash based on some string value and the current date (potentially milliseconds since the epoch). This question is impossible to answer without the source code, but try looking in the code for any references to constant string values and references to Time() or Calendar().
