2

Apologies, if this has been asked before. I am reverse engineering a chinese app that connects to a BLE device, so I can inspect how it transmits the data. Using this official guide I decompiled my apk and made it debuggable. However, after importing it and trying to debug the app I'm presented with this message:

To debug the APK, native libraries (*.so files) must have debug symbols. The following libraries are missing debug symbols:

  • libBugly.so
  • libecc256.so

While the app executes fine it does not stop at any breakpoints.

The guide tells me I need to attach native debug symbols to those .so-files. How can I do that since I only extracted them from the apk?

1
  • Instead of making it debuggable I would suggest using Frida and hooking relevant methods. Frida does not need any debug symbols. Furthermore I would capture the Bluetooth traffic by enabling Bluetooth HCI snoop log in developer options. Also check the decompiled code (e.g. by Jadx) if you can identify the parts you are interested in.
    – Robert
    Commented Jan 23, 2021 at 13:59

1 Answer 1

3

Generally, if the native libraries are distributed (in the apk) without debug symbols (which is quite common, and along with that, the apk was also made non-debuggable), you would not be able to find those debug symbols unless you are the developer or you are able to obtain the libraries with debug symbols from the developer.

Therefore, even though you can repackage the apk and make it debuggable as you did, you would be missing crucial data needed to actually debug the app that way. Instead, the typical approach would be to use a dynamic instrumentation tool like Frida, rather than a debugger, to assist in your reverse engineering attempts. Typically, you may use Frida along with a disassembler like Ghidra, to explore the workings of the app.

This site is a good place to ask questions on the use of Frida, Ghidra, etc., if you decide to try using them.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.