Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this community
I want to do a challenge: automise some tasks that I do in a game so I can get the max of points.
To do that, I need to know the url called and the parameters that are used in the Game. After setting a genymotion station and made a proxy, I've discovered that the game won't start if the certificate doesn't match with the one that is set in the app.
So my question is how I can go further?
If you're a Windows user, as a matter of dynamic analysis, you could try using an emulator like BlueStacks, then inspect your system network traffic with a program like Fiddler or WireShark.
Additionally, you could use a program like Cheat Engine to open the BlueStacks process and scan its memory for strings related to URLs. As an aside, you could statically analyze the APK by unpacking/decompressing it, then comb through its files looking for relevant strings.
Back to Cheat Engine, you could ultimately write a script in Assembly or Lua to automate certain tasks--or you could just change certain values in memory if there is weak server validation (or none at all).
Perhaps a significantly easier solution all around is to use something like AutoIt, which would allow you to script mouse movements and keystrokes. At that rate, all you have to do is install the game in the emulator, then script whatever process(es) you need to script for automation.
If you can emulate the application, you could try to look at the hooking method :) for example take a look to:
xposed framework - a simple example - and another
frida - It’s a dynamic code instrumentation toolkit
Xposed Framework requires root access to install.
Also Frida require a rooted phone.
Then you can edit for example the parameters of the function which controls the certificate
