0

While going through the app analysis i found that when i use logcat it shows me encrypted data ..now the app is obfuscated ... When i use burp suite with my android emulator it was making a POST request to a method of an api in form of JSON Array (Encrypted)...is there any way that i can decrypt this text or find decryption key?

Also i have found that after deobfuscating i found a method named as void decode() but it doesnt reveal any information..so is there is anyway to use this method explicitly?

Improve this question
5
  • Pull the app apk from your device, decompile it, search for the call that created the logcat entry and check the data-flow backward to identify the method that encrypts the data. Then I would use frida on an rooted phone to hook that method and extract the used encryption key (assuming the used encryption algorithm is something standardized like AES).
    – Robert
    Jan 23, 2021 at 17:04
  • I got that partially but can u elaborate more or just give me some tutorial video link or any material to see how to perform it?
    – Hacker88929
    Jan 23, 2021 at 19:26
  • how many hours are you willing to invest? Depending on your current knowledge it can require a lot of time for learning the skills required to reverse engineer and app and use frida to extract the data you want.
    – Robert
    Jan 23, 2021 at 19:31
  • Like for me the time is not the consent i just want to get it done 😅
    – Hacker88929
    Jan 23, 2021 at 19:50
  • Then open the app in Jadx and find the position where the log entry is created. That requires Java and Android development skills. If you don't have those learn them first.
    – Robert
    Jan 23, 2021 at 20:36

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.