Questions tagged [android]
Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.
370
questions
1
vote
0
answers
34
views
How to encode file lua and resource files
I am trying to decrypt luas files it use cocos2dx but its encrypted maybe aes encryption.
With frida i can extract most lua files but not all.
And with ida64 i cant find the key.
- 11
0
votes
0
answers
28
views
How do I install an .xpi file on Firefox Android?
I want to use Google's "Translate Page" function on Firefox.
- 109
2
votes
0
answers
97
views
Reverse engineering a flutter built apk
I was trying to reverse engineer an apk built with flutter. I actually feel like reversing flutter built apps did not get much reverse writeups on the community. one of the tools for the task ...
- 219
1
vote
1
answer
52
views
How do you identify a software framework?
I downloaded a free app but I want to stop it from showing ads.
https://www.statista.com/statistics/869224/worldwide-software-developer-working-hours/
Apparently it's almost certainly in one of the ...
- 109
-1
votes
0
answers
52
views
How do you edit an APK file so the app won't show ads?
I was referred here by the Android exchange.
Can I just say, people really would be modding androids in the 21st century. Who'da thunk it.
- 109
2
votes
0
answers
52
views
Android game reverse http request body
I'm trying to reverse request that are made to an android game to learn more about how it works.
I was able to find endpoints requests that are made with frida and mitmproxy but now I'm stuck because ...
2
votes
0
answers
29
views
How to re-create media file from android sender output stream
I would like to perform dynamic analysis on some android apps to check if these apps sending metadata with media files or not.
Ideas like the picture below:
Step 1: I prepared an image with metadata (...
2
votes
0
answers
63
views
Flashed "compatible" firmware onto two generic Allwinner A50 tablets
I'm already at least 3 days on this and can't find a way out. I'm still unsure if it fits here, but here we go!
I have 3 A50 Allwinner tablets (HOW HT-705XT) that I wanted to root. Since the only way ...
- 41
1
vote
0
answers
49
views
Cannot load libvulkan.so on Linux chroot running on Android while normal Android apps can load it
Environment
First I will give a quick summary of my environment
Device: Samsung Galaxy M20 (m20lte)
SoC: Exynos 7904 (with Mali-G71 GPU)
OS: Android 10 (Stock ROM with root using Magisk)
Kernel: 4.4....
- 219
1
vote
0
answers
86
views
I trying rewrite asm to c++ [closed]
This code generates an API key. I use it in an android app as .so file,
but I need to rewrite it to java from c++. How do I translate?
push rbp
push r15
push r14
push r13
push r12
push ...
- 11
1
vote
0
answers
93
views
Extract assets images from a games APK [closed]
I'm trying to remove some images from an android game, but when I try to view them in a hexadecimal viewer I see that they don't contain a PNG header, so I can't view them through the python PIL ...
- 11
2
votes
1
answer
97
views
Frida hook X509Certificate
I have an android application. It connects to a web socket server and uses the X509Certificate to verify the connection.
newBuilder.trustManagers(WebSocketClient.sTrustManagers);
By using Frida I ...
- 35
2
votes
0
answers
53
views
How do I log a string in smali without its obfuscated function?
I'm reversing engineering an app and after analyzing with man-in-the-middle, I find that it obfuscates its messages to the server so it looks like a gibberish.
String stc = ("msg=" + ...
2
votes
0
answers
64
views
How can I detect which Android native function that is hooked by Mobile Substrate: MSHookFunction?
I want to detect hook behavior of MSHookFunction on Android. This is Mobile Substrate I use in my test app https://github.com/Breathleas/Android-Hooking-Template-Cydia-Substrate/tree/master/jni/...
- 121
1
vote
0
answers
59
views
deobfuscate Dexgaurd obfuscated code
I was reversing an apk. the code detects whether the apk is running on a rooted device or not. if it is rooted or an emulator it will stop and close out. so this is the snippet code which I think it ...
- 219
1
vote
0
answers
91
views
ghidra assigns local variable to register
im reversing a android native library and im trying to understand how a token is generated the toke n is passed to a callback java method and i traced where the method is getting called from
this is ...
- 41
1
vote
1
answer
173
views
HELP Decrypting Lua files
i'm trying to mod a game named : DDTank Mobile, which is on both Android & IOS.
This game runs on cocos2d engine, the thing is the lua files are encrypted.
I read somewhere to look for 'sign' at ...
1
vote
0
answers
99
views
reverse engineering an APK file to find HTTP requests in the source code
I've extracted an apk(react native) with dex2jar and jar to java through jd-qui and also with apktool, and I can view the source code but there is no clue where are the HTTP requests in the source ...
- 11
2
votes
0
answers
181
views
How to decompile an APK written in Golang?
I recently started trying to learn basic reverse engineering and Golang. Decompiling Android apps written in C++ and Java/Kotlin seems easy as there are tons of documents and tools that enable you to ...
- 21
2
votes
0
answers
95
views
Next steps for android native library RE (JNI_OnLoad, root check)
I'm trying to RE an Android app that detects root on a system.
Using frida to backtrace 'access' calls I found out that the root check happens natively:
access(/system/xbin/su, 0x0)
Interceptor ...
- 21
1
vote
0
answers
50
views
Reverse engineering of Process manager apk
Is there someone helps me to understand how to build the server of this apk https://lab52.io/blog/complete-dissection-of-an-apk-with-a-suspicious-c2-server/ ? I tried to disassemble the apk but it is ...
- 27
0
votes
0
answers
35
views
Malware apk in Android [duplicate]
Is there some website where i'm able to find malware apk filtering by permission (for instance: RECORD_AUDIO)? I'm looking for website similar to pithus
- 27
1
vote
2
answers
341
views
Decompiling and Recompiling APK leads to crash using Apktool
Decompiling and recompiling an apk causes it to crash. My goal is simply to insert a method into smali code that prints a stacktrace, but even decompiling and recompiling with no changes causes the ...
- 121
1
vote
0
answers
384
views
frida cant cast string array to java.lang.object
i have a java method i am trying to call manually
public static native Object a(int i, int i2, long j, String str, Object obj);
the last parameter is a string list casted to java.lang.object the way ...
- 41
1
vote
0
answers
12
views
Need help injecting SSID into Momentum app checking for device wifi
Hello so I'm trying to add a device onto my Genymotion emulated device
but to add it the app needs to detect the AP. this is the logcat of just the apps logs
If anyone can help let me know im trying ...
1
vote
0
answers
137
views
SSL Pinning React Native
I'm trying to remove SSL pinning with Android device.
I've tried different techniques like hooking the app with Objection, re-pinning with Frida, using the SSLUnpinning app from the Xposed repo, etc. ...
moskino11
0
votes
0
answers
395
views
frida calling method raises error pointer expected
i have a java method i am trying to call manually
public static native Object a(int i, int i2, long j, String str, Object obj);
whenever i try to call it and pass the needed arguments it raises a ...
- 41
0
votes
0
answers
58
views
Where can I find the hashing algorithm in source code?
When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint.
For example, if I enter the following email & pass :
"abc@abbc.com:abc"
it ...
- 1
0
votes
1
answer
104
views
Malware application in Android
Is there some website that give us the possibility to download malware APK in order to study it? I’m interested to study the abuse of android.permission.RECORD_AUDIO in Android 8.
- 27
0
votes
0
answers
24
views
What skills are need to find ways of take root of Phones?
I am very interested in about take root of Android phones and I'm noob of reverse engineering.
I have some of old Android devices that already unused. Some Android devices provide easier path to root ...
- 131
1
vote
1
answer
114
views
How to set a breakpoint in android's openssl library in running android application?
I'm debugging an obfuscated android application. I use Android Studio's debugger. I attach it remotely to my physical device via adb. I can set a breakpoint in the app smali code, but when I try to ...
- 13
0
votes
1
answer
454
views
ghidra returning wrong function address
I am reverse engineering a android app shared library (.so file) and I am trying to use frida to hook a non exported native function
I am using this hook
const ghidraImageBase = 0x00100000;
const ...
- 41
4
votes
2
answers
1k
views
How to encode file
I am trying to decrypt a lua file which has been encrypting using a key. Some background to the lua file. Its from an android I decompiled the APK and found that all the lua files are encrypted.
- 41
0
votes
0
answers
30
views
Is there any Android application that can manipulate the http response?
Is there any android app to manipulate http response body without vpn?
for example:
from
"0|{random_string}|Wrong"
Becomes
"1|{random_string}|True"
Thanks in advance
- 1
0
votes
1
answer
135
views
Reverse engineering ELF: The e_phentsize field in the ELF header is less than the size of an ELF program header
I have extracted the .so binary libTheArmKing.so (located in lib directory in apk file) from a hack of World War Heroes game (an Android game) from Plantimod Forum.
file output:
libTheArmKing.so: ELF ...
- 219
0
votes
0
answers
19
views
IDA debug function spawned by pthread_once
I am using IDA to debug android, some libs use pthread_once/pthread_create function to call a function. How do I use/set up IDA to debug the function passed to pthread_once ?
- 29
0
votes
1
answer
605
views
frida returning wrong overload of android method
im trying to hook the C6494a method has 2 parameters the ge6 object and a activity object whenever i try to hook this method with a hook overload that contains both ge6 and the activity object frida ...
- 41
2
votes
0
answers
301
views
Intercept android app DNS lookup with Frida
I have been attempting to intercept when an app performs a DNS lookup using Frida. I assumed that ultimately a DNS lookup will end up in a libc call to gethostbyname or getaddrinfo but this does not ...
- 245
0
votes
0
answers
117
views
Inject script into Dex-Protected app
I've seen scripts like :
https://github.com/hluwa/frida-dexdump
https://github.com/apkunpacker/DexDumper
that can extract the Dex files but what I want is to inject into running app and identified ...
- 257
1
vote
0
answers
167
views
Where can I find the encryption algorithm for this POST request in an Android APP?
I have an Android app for which I need to mock an API call outside of that environment. I successfully killed the certificate pinning on this app with Frida in order to access the URL and more, but ...
- 19
2
votes
0
answers
586
views
Understand a function within Hermes byte code
The Android app I am looking at uses React Native with the Hermes JS Engine. This generates a index.android.bundle binary that contains Hermes JS bytecode.
I was able to disassemble the binary file ...
1
vote
0
answers
128
views
Compress Xamarin assemblies after decompression
I have an APK that has assemblies in a single blob file. I could extract them successfully using decompress-assemblies.
Is there anyway I can compress them again into assemblies.blob file or at least ...
- 11
1
vote
1
answer
71
views
Gdb hardware watchpoint error on android
After failing to find a solution to this I have started using Gdb and have encountered another error.
Gdbfails to set hardware watchpoint when I'm remote debugging a rooted arm7-a target. It supports ...
- 154
2
votes
1
answer
541
views
LLDB debugging on android?
I currently don't have a pc. I have two rooted devices Arm64 host device with Debian rootfs and the device to be debugged which contains the lldb-server binary armv7. I am trying to remote debug my ...
- 154
1
vote
1
answer
639
views
Modify, unpack, and rebuild an Android App Bundles (.aab) file
My developer has not provided me the source code backup for my listed app in Google Play (his PC was stolen and all codes are gone with it). I logged on to my Play Store developer's account and found ...
- 13
0
votes
0
answers
168
views
How can i inject xamarin smali code into another apk?
I tried to make a simple foreground service android application using xamarin... then decompile and inject it into another apk...but it always crashes.
here is adb logcat :
05-31 23:57:34.158 7680 ...
- 1
0
votes
0
answers
215
views
Trace java calls from a native library using frida
Im trying to trace method calls from a native library using frida
I've tried jnitrace but it won't print anything
Do you have any suggestion?
0
votes
0
answers
149
views
Encrypted properties files in asset folder of android application
I'm trying to reverse engineer an Android application. The goal is to obtain a secret from the apk. After decompiling the application, I found some interesting files in the assets directory. The files ...
1
vote
1
answer
723
views
Where can I find the encryption algorithm in source code?
When I submit a Customer Reference ID in an Android Application it POSTs an encrypted string to an API endpoint.
For example, if I enter the following CR ID :
"SR-54585482"
it POSTs the ...
- 13
2
votes
0
answers
773
views
Frida class constructor hook not called while there do exist instances of the class
I have an (obfuscated) app with a certain class from which I would like to hook the constructor. The class has only 1 constructor defined and so I hooked the class as follows:
var Aclass = Java.use('...
- 51