Questions tagged [android]
Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.
411
questions
-2
votes
0
answers
35
views
Ghidra don't show me java native function
in this Java code there are many functions to use through the native-lib file and this is the calling code
static {
System.loadLibrary("native-lib");
}
public final native byte[] f(Context ...
- 1
1
vote
1
answer
34
views
Dynamic analysis of Android applications' interaction
There are two or even more Android applications that somehow interact with each other:
Application A invokes application B or sends request to it directly or via third application C. I don't have the ...
- 113
1
vote
0
answers
40
views
Reverse engineer obfuscated Android SDK files (DJI Mobile SDK)
For a hobby project, I would like to be able to control the DJI Mini 3 drone with my PC. Ideally, I would love if I were able to just use the DJI Tello, but it does not have a long enough battery ...
1
vote
2
answers
67
views
How to find what are all the third party apps used in an android app manually by decompiling an apk
How to find all the Third Party Libraries (TPLs) used in an android app after de-compiling apk using jadx? I have looked at this answer but this is too vague.
I can use tools such as Libradar etc. but ...
- 13
1
vote
1
answer
79
views
Sniff Bluetooth traffic using Fitness Tracker
I am attempting to sniff the Bluetooth between the fitness tracker(GOJI ACTIVE GFITBK20 Activity Tracker) and the application(Goji Active) installed on the phone but I am unable to see any health ...
- 11
1
vote
1
answer
131
views
How to decrypt or decode unknown file formats?
I have got a new challange. I hvae some log files that mostly contain android device modem and ap logs.
The file extension varies depending on the chipset. There is specific tool provided by the ...
- 11
1
vote
2
answers
53
views
Deodex Android 5 system app
Speaking of Qualcomm, their phones have the ability to expose a diagnostic/programming port, something many Qualcomm BREW feature phones do.
Well, as it turns out, that Alcatel supports the same thing!...
- 183
0
votes
0
answers
73
views
Make a reverse engineering for dead app
Hi,there is an app (Voip Recorder & Screen Recorder)the developer stopped updating the app from 3 years, and it's the only app in the world could record the screen with internal sound likes ...
0
votes
1
answer
51
views
Getting corrupted video stream when Reverse Engineering UDP video stream from cheap Indian WiFi camera Drone
enter link description here
I have this Quadcopter "Garuda" that can stream video to an Android APP named VS FPV PRO over wifi.
I wanted to receive the video stream on my laptop to run some ...
- 1
0
votes
0
answers
42
views
Is it possible to hide androidmanifest.xml
I heard from someone today that androidmanifest.xml is hidden by new malware. I couldn't find anything about this on the internet. Is it possible?
0
votes
1
answer
51
views
Frida, Frida-tools, Android version Problems
I have this environment..
android : 9 version
python : 2.7.12
I am not sure which version of Frida and Frida-tools I need to use to be compatible.
I'm currently using 12.8.5, but an ascii codec ...
- 1
0
votes
1
answer
87
views
Need help reverse engineering an Android app
I want to make a script that allows me to download videos from an online streaming service. For that I need to make a http POST request to an url with the parameters acceptVideo, t and s, like this: ...
0
votes
1
answer
136
views
How can I change the data type of `puVar1` in this C++ function?
I was reversing ( new to the reversing world of course) being using Ghidra for this. I get a C++ function AppChat::__Status::setDescription(ErrorCode param_1). Within this function, there's a variable ...
- 309
1
vote
2
answers
81
views
Looking for a packet forwarder on Android that redirects all packets to PC
I want to capture packets from Android apps. I need an packets forwarder on phone that creates a VPN to redirect all TCP packets to PC, then capture them with 'mitmproxy'. I want to use mitmproxy ...
- 209
2
votes
1
answer
192
views
How to hook RuntimeException to prevent crashes?
I tried to find out how RuntimeException works internally in cs.android.com so I can understand how to prevent crashes but didn't find anything useful and I have no clue how to analyze components-...
- 137
0
votes
1
answer
52
views
How to make a apk packages manually like other linux distro packages?
Because Android Linux-based and it has its own package format named APK, so it will be possible to create APK packages manually from a specification like a specification for pacman packages in Arch ...
- 1
2
votes
1
answer
89
views
radare2 cross reference problem
I am analyzing an Arm64 Android shared library and I am trying to find a pointer to dlopen.
I have successfully manually achieved this in IDA64 and Ghidra, however I want to automate the process with ...
- 141
0
votes
1
answer
155
views
APK/Apktool If I decompile and recompile sources the app does not start
I'm trying to reverse an apk but there is a strange thing that happens, probably something new for me, basically if I decompile only the resources (not dex files) and recompile it zipalign/sign, the ...
- 1
0
votes
1
answer
554
views
Pass Play integrity api when app is repacked with Frida-gadget
I have decompiled an app that uses the Play integrity API.
I attach the Frida-gadget and rebuild/resign the apk.
After installing it on an unrooted phone (that passes the Play integrity API), the ...
- 21
0
votes
0
answers
71
views
Need SOME help decrypt xxtea encrypted Lua file from cocos2D game LIBRARY
iam trying from a while to figure out the key this cocos2dx game but couldn't figure it out if someone could abit help with the way to find these keys
you check the the file from here https://github....
0
votes
0
answers
580
views
Failed to attach: unable to connect to remote frida-server: closed
I'm trying to bypass Frida (Android) local port scanning detection, so I followed this guide. The sequence of commands I used are : (magic_man is alias for frida_server)
adb root
adb push magic_man /...
- 101
0
votes
1
answer
105
views
Recognize API calls of an APK
I have an Apk file for an app that functions as an AI image generator. I want to identify the specific API call responsible for the AI image generation.
How can I do it?
- 101
2
votes
1
answer
268
views
How does Play integrity api assures Genuine app binary
I discovered that we can use the Play integrity api instead of safetynet now to assure the integrity off an app that is running. I am wondering if people have a way of bypassing the "Genuine app ...
- 21
0
votes
0
answers
83
views
decode lua files cocos2dx and protected from Frida and IDA64 for hooking
I want to decode the lua and other resources files. But i cant find the key when i use frida or ida 64 it crash before the game start.
Game is here https://megamonglobal.com/
https://imgur.com/88Habwu
- 53
1
vote
0
answers
132
views
Frida: how to hook a synthetic class
When reverse engineering an APK I came across a class that was marked synthetic.
I have used JADX decompiler. The simplified result I got was:
package com;
public final class zz6 extends B implements ...
0
votes
1
answer
127
views
Reverse Android native lib
I am wondering how to reverse Android native lib. Its covered with ollvm so the code is awful and I can't understand anything
I can use Frida but not Frida stalker (got kicked every time trying to ...
- 1
1
vote
1
answer
767
views
How to decode lua files and resource files that are protected from Frida and IDA64?
I am trying to decrypt Lua files from an Android game "The Sea Road: Fate Assembly" (APK download link). It uses Cocos2d-x, but it's encrypted, maybe with AES encryption.
With Frida, the ...
- 53
0
votes
1
answer
80
views
IDA Pro: JDWP error: ABSENT_INFORMATION - Desired information is not available
I am trying to debug a dex file from an APK file in IDA Pro. I set some breakpoints when launching the activity. When I start the process, the application waits for the debugger. After some time, IDA ...
1
vote
1
answer
506
views
possible to modify apk to bypass api request/response?
I have an apk for an app that contacts a web API that no longer exists. I do not have the source code. The app will not work normally without getting a response from the API.
Something like this:
...
- 131
1
vote
0
answers
390
views
Read value from frida hooked native method Jlong parameter
I am new to using frida for hooking native android code i.e lib.so, so I have load the lib into ghidra and can find the native function. the native function is getting 5 params including jnienv and ...
- 309
0
votes
0
answers
544
views
How does the Easy Victory cheat get data from another app in real time?
Easy Victory was developed in Java for Android
I was very curious about how Easy Victory takes data from the game's balls and billiard cue force/velocity to calculate trajectories
This is not a mod ...
0
votes
1
answer
384
views
How learn which functions are called in .so library at Android?
I want to learn how listen certain .so files. I mean what is the way to know which fuctions are called which body of code executed in shared library at Android? I just wanted mofify stock camera on my ...
0
votes
0
answers
174
views
How can I find which JNI library implements a java native method at runtime for Android applications?
I am doing security research, my target application includes some JNI libraries which implements some native java methods I am interested in. This app is obfuscated, I can't directly find the library ...
- 101
1
vote
0
answers
53
views
I Want to Edit lk partition to support fastboot binaries
based on what i found Oppo removed the fastboot binaries from my phone (Oppo A5s) and since the lk partition is the one that have it by default i would like to know how can i sort of inject the ...
- 11
1
vote
0
answers
52
views
JEB pro is not showing xrefs for native code (arm)
i have this problem when analyzing arm shared object.
when working with IDA pro, it finds all xrefs but in jeb, most of xrefs are missing.
when JEB finfishes, the final analysis lacks most of xrefs. I ...
- 51
2
votes
0
answers
206
views
APK / Decrypting [closed]
I'm new to Reverse Engineering, so I apologize if something is wrong.
There is a free program that requires a license key, which can no longer be bought and obtained. I'm trying to write a KeyGen or ...
- 21
3
votes
0
answers
191
views
What is the best emulator/environment for android debugging?
I know the question smells like I want a ready solution but I have been trying many things and after a lot of headaches, still I can't do what I want.
There are fast emulators but they don't provide ...
- 51
2
votes
0
answers
109
views
Need help extracting AP_Pack .obb files
I'm trying to extract the files for the series of 4 games - Sorcery!, which are in the format .obb.
Thanks to a Hex editor I saw that the .obb was an AP_Pack, and looking for more information on the ...
- 21
2
votes
0
answers
76
views
Difference between __openat and openat (Android)
While reverse engineering an Android process, I wanted to explore the openat function. I noticed that there is a symbol "openat" and another symbol "__openat". What is the ...
- 193
4
votes
0
answers
270
views
How to trace with Frida some specific functions in ARM ending with BX LR
I'am trying to trace down with Frida v16.0.11 (frida-trace) all calls to exported functions from "libssl.so" (Android, 32bit). But turns out that Frida is unable to hook some functions. One ...
- 41
4
votes
0
answers
76
views
How to edite a compiled Reactive Native file "main.bundle"
I bought I vacuum robot from Dreame and needed to replace the Lidar sensor myself as in my country (Brazil) don't have technical assistance, but now it is not working properly because it says that don'...
- 41
3
votes
1
answer
347
views
How do i set these tricky boolean values to true in Smali-Dalvik?
These would allow me to make the input text field clickable and editable but the thing is how to do this.
Instance field
.field private g:Z
1 -
invoke-virtual {p1, p2, v0}, Landroid/content/res/...
- 31
3
votes
0
answers
64
views
How do I make a text field editable when the app is designed to autofill OTP SMS?
Hello fellow rev engineers,
I'm running an app in an emulator and the problem is that for registration it must autofill the OTP sent by SMS, the text field isn't editable/clickable and I can't advance ...
- 31
1
vote
0
answers
575
views
Bypass SSL pinning for android application
I am trying to analyze the network traffic from an android application for research purpose. I tried few approaches but unable to achieve the results. I am using rooted android emulator.
I tried to ...
- 11
2
votes
1
answer
763
views
Frida not hook functions
I want to hook a xxtea_decrypt
but it not trigger and on other games it trigger but some games not trigger it.
On ida pro its trigger the xxtea_decrypt but frida nope
here is the code that i using it
...
- 53
2
votes
0
answers
275
views
How to encode file lua and resource files
I am trying to decrypt luas files it use cocos2dx but its encrypted maybe aes encryption.
With frida i can extract most lua files but not all.
And with ida64 i cant find the key.
- 53
4
votes
1
answer
3k
views
Reverse engineering a flutter built apk
I was trying to reverse engineer an apk built with flutter. I actually feel like reversing flutter built apps did not get much reverse writeups on the community. one of the tools for the task ...
- 309
2
votes
1
answer
96
views
How do you identify a software framework?
I downloaded a free app but I want to stop it from showing ads.
https://www.statista.com/statistics/869224/worldwide-software-developer-working-hours/
Apparently it's almost certainly in one of the ...
- 121
2
votes
0
answers
105
views
Android game reverse http request body
I'm trying to reverse request that are made to an android game to learn more about how it works.
I was able to find endpoints requests that are made with frida and mitmproxy but now I'm stuck because ...
2
votes
0
answers
33
views
How to re-create media file from android sender output stream
I would like to perform dynamic analysis on some android apps to check if these apps sending metadata with media files or not.
Ideas like the picture below:
Step 1: I prepared an image with metadata (...
- 121