0

While going through the app analysis i found that when i use logcat it shows me encrypted data ..now the app is obfuscated ... When i use burp suite with my android emulator it was making a POST request to a method of an api in form of JSON Array (Encrypted)...is there any way that i can decrypt this text or find decryption key?

Also i have found that after deobfuscating i found a method named as void decode() but it doesnt reveal any information..so is there is anyway to use this method explicitly?

5
  • Pull the app apk from your device, decompile it, search for the call that created the logcat entry and check the data-flow backward to identify the method that encrypts the data. Then I would use frida on an rooted phone to hook that method and extract the used encryption key (assuming the used encryption algorithm is something standardized like AES). – Robert Jan 23 at 17:04
  • I got that partially but can u elaborate more or just give me some tutorial video link or any material to see how to perform it? – Hacker88929 Jan 23 at 19:26
  • how many hours are you willing to invest? Depending on your current knowledge it can require a lot of time for learning the skills required to reverse engineer and app and use frida to extract the data you want. – Robert Jan 23 at 19:31
  • Like for me the time is not the consent i just want to get it done 😅 – Hacker88929 Jan 23 at 19:50
  • Then open the app in Jadx and find the position where the log entry is created. That requires Java and Android development skills. If you don't have those learn them first. – Robert Jan 23 at 20:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.