Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Filter by
Sorted by
Tagged with
0 votes
0 answers
18 views

Recognize API calls of an APK

I have an Apk file for an app that functions as an AI image generator. I want to identify the specific API call responsible for the AI image generation. How can I do it?
Saad's user avatar
  • 101
1 vote
0 answers
36 views

How does Play integrity api assures Genuine app binary

I discovered that we can use the Play integrity api instead of safetynet now to assure the integrity off an app that is running. I am wondering if people have a way of bypassing the "Genuine app ...
user45316's user avatar
0 votes
0 answers
28 views

decode lua files cocos2dx and protected from Frida and IDA64 for hooking

I want to decode the lua and other resources files. But i cant find the key when i use frida or ida 64 it crash before the game start. Game is here https://megamonglobal.com/ https://imgur.com/88Habwu
xbuyk987's user avatar
1 vote
0 answers
39 views

Frida: how to hook a synthetic class

When reverse engineering an APK I came across a class that was marked synthetic. I have used JADX decompiler. The simplified result I got was: package com; public final class zz6 extends B implements ...
Sven Onderbeke's user avatar
0 votes
1 answer
66 views

Reverse Android native lib

I am wondering how to reverse Android native lib. Its covered with ollvm so the code is awful and I can't understand anything I can use Frida but not Frida stalker (got kicked every time trying to ...
theArt's user avatar
  • 1
1 vote
1 answer
264 views

How to decode lua files and resource files that are protected from Frida and IDA64?

I am trying to decrypt Lua files from an Android game "The Sea Road: Fate Assembly" (APK download link). It uses Cocos2d-x, but it's encrypted, maybe with AES encryption. With Frida, the ...
xbuyk987's user avatar
0 votes
1 answer
65 views

IDA Pro: JDWP error: ABSENT_INFORMATION - Desired information is not available

I am trying to debug a dex file from an APK file in IDA Pro. I set some breakpoints when launching the activity. When I start the process, the application waits for the debugger. After some time, IDA ...
Quayyum Ali's user avatar
1 vote
1 answer
231 views

possible to modify apk to bypass api request/response?

I have an apk for an app that contacts a web API that no longer exists. I do not have the source code. The app will not work normally without getting a response from the API. Something like this: ...
garbb's user avatar
  • 131
1 vote
0 answers
173 views

Read value from frida hooked native method Jlong parameter

I am new to using frida for hooking native android code i.e lib.so, so I have load the lib into ghidra and can find the native function. the native function is getting 5 params including jnienv and ...
hanan's user avatar
  • 309
0 votes
0 answers
175 views

How does the Easy Victory cheat get data from another app in real time?

Easy Victory was developed in Java for Android I was very curious about how Easy Victory takes data from the game's balls and billiard cue force/velocity to calculate trajectories This is not a mod ...
Jonathan Silva's user avatar
0 votes
1 answer
154 views

How learn which functions are called in .so library at Android?

I want to learn how listen certain .so files. I mean what is the way to know which fuctions are called which body of code executed in shared library at Android? I just wanted mofify stock camera on my ...
Savox Saastuxl's user avatar
0 votes
0 answers
99 views

How can I find which JNI library implements a java native method at runtime for Android applications?

I am doing security research, my target application includes some JNI libraries which implements some native java methods I am interested in. This app is obfuscated, I can't directly find the library ...
hldev's user avatar
  • 101
1 vote
0 answers
31 views

I Want to Edit lk partition to support fastboot binaries

based on what i found Oppo removed the fastboot binaries from my phone (Oppo A5s) and since the lk partition is the one that have it by default i would like to know how can i sort of inject the ...
Khalyl's user avatar
  • 11
1 vote
0 answers
39 views

JEB pro is not showing xrefs for native code (arm)

i have this problem when analyzing arm shared object. when working with IDA pro, it finds all xrefs but in jeb, most of xrefs are missing. when JEB finfishes, the final analysis lacks most of xrefs. I ...
shetal's user avatar
  • 51
2 votes
0 answers
143 views

APK / Decrypting [closed]

I'm new to Reverse Engineering, so I apologize if something is wrong. There is a free program that requires a license key, which can no longer be bought and obtained. I'm trying to write a KeyGen or ...
wh1tedance's user avatar
3 votes
0 answers
131 views

What is the best emulator/environment for android debugging?

I know the question smells like I want a ready solution but I have been trying many things and after a lot of headaches, still I can't do what I want. There are fast emulators but they don't provide ...
shetal's user avatar
  • 51
2 votes
0 answers
64 views

Need help extracting AP_Pack .obb files

I'm trying to extract the files for the series of 4 games - Sorcery!, which are in the format .obb. Thanks to a Hex editor I saw that the .obb was an AP_Pack, and looking for more information on the ...
Maneki's user avatar
  • 21
2 votes
0 answers
53 views

Difference between __openat and openat (Android)

While reverse engineering an Android process, I wanted to explore the openat function. I noticed that there is a symbol "openat" and another symbol "__openat". What is the ...
localacct's user avatar
  • 193
4 votes
0 answers
216 views

How to trace with Frida some specific functions in ARM ending with BX LR

I'am trying to trace down with Frida v16.0.11 (frida-trace) all calls to exported functions from "libssl.so" (Android, 32bit). But turns out that Frida is unable to hook some functions. One ...
Cyb's user avatar
  • 41
4 votes
0 answers
55 views

How to edite a compiled Reactive Native file "main.bundle"

I bought I vacuum robot from Dreame and needed to replace the Lidar sensor myself as in my country (Brazil) don't have technical assistance, but now it is not working properly because it says that don'...
Trix's user avatar
  • 41
3 votes
0 answers
203 views

How do i set these tricky boolean values to true in Smali-Dalvik?

These would allow me to make the input text field clickable and editable but the thing is how to do this. Instance field .field private g:Z 1 - invoke-virtual {p1, p2, v0}, Landroid/content/res/...
user43636's user avatar
3 votes
0 answers
48 views

How do I make a text field editable when the app is designed to autofill OTP SMS?

Hello fellow rev engineers, I'm running an app in an emulator and the problem is that for registration it must autofill the OTP sent by SMS, the text field isn't editable/clickable and I can't advance ...
user43628's user avatar
1 vote
0 answers
415 views

Bypass SSL pinning for android application

I am trying to analyze the network traffic from an android application for research purpose. I tried few approaches but unable to achieve the results. I am using rooted android emulator. I tried to ...
suplesh's user avatar
  • 11
2 votes
1 answer
453 views

Frida not hook functions

I want to hook a xxtea_decrypt but it not trigger and on other games it trigger but some games not trigger it. On ida pro its trigger the xxtea_decrypt but frida nope here is the code that i using it ...
xbuyk987's user avatar
2 votes
0 answers
245 views

How to encode file lua and resource files

I am trying to decrypt luas files it use cocos2dx but its encrypted maybe aes encryption. With frida i can extract most lua files but not all. And with ida64 i cant find the key.
xbuyk987's user avatar
4 votes
1 answer
2k views

Reverse engineering a flutter built apk

I was trying to reverse engineer an apk built with flutter. I actually feel like reversing flutter built apps did not get much reverse writeups on the community. one of the tools for the task ...
hanan's user avatar
  • 309
2 votes
1 answer
73 views

How do you identify a software framework?

I downloaded a free app but I want to stop it from showing ads. https://www.statista.com/statistics/869224/worldwide-software-developer-working-hours/ Apparently it's almost certainly in one of the ...
Ethan Miller's user avatar
2 votes
0 answers
83 views

Android game reverse http request body

I'm trying to reverse request that are made to an android game to learn more about how it works. I was able to find endpoints requests that are made with frida and mitmproxy but now I'm stuck because ...
Florent Trust's user avatar
2 votes
0 answers
33 views

How to re-create media file from android sender output stream

I would like to perform dynamic analysis on some android apps to check if these apps sending metadata with media files or not. Ideas like the picture below: Step 1: I prepared an image with metadata (...
ThanhLam112358's user avatar
3 votes
0 answers
323 views

Flashed "compatible" firmware onto two generic Allwinner A50 tablets

I'm already at least 3 days on this and can't find a way out. I'm still unsure if it fits here, but here we go! I have 3 A50 Allwinner tablets (HOW HT-705XT) that I wanted to root. Since the only way ...
Fusseldieb's user avatar
2 votes
0 answers
349 views

Cannot load libvulkan.so on Linux chroot running on Android while normal Android apps can load it

Environment First I will give a quick summary of my environment Device: Samsung Galaxy M20 (m20lte) SoC: Exynos 7904 (with Mali-G71 GPU) OS: Android 10 (Stock ROM with root using Magisk) Kernel: 4.4....
raspiduino's user avatar
2 votes
0 answers
113 views

I trying rewrite asm to c++ [closed]

This code generates an API key. I use it in an android app as .so file, but I need to rewrite it to java from c++. How do I translate? push rbp push r15 push r14 push r13 push r12 push ...
Master's user avatar
  • 21
2 votes
0 answers
343 views

Extract assets images from a games APK [closed]

I'm trying to remove some images from an android game, but when I try to view them in a hexadecimal viewer I see that they don't contain a PNG header, so I can't view them through the python PIL ...
amateur's user avatar
  • 21
3 votes
1 answer
220 views

Frida hook X509Certificate

I have an android application. It connects to a web socket server and uses the X509Certificate to verify the connection. newBuilder.trustManagers(WebSocketClient.sTrustManagers); By using Frida I ...
user123's user avatar
  • 65
3 votes
0 answers
159 views

How do I log a string in smali without its obfuscated function?

I'm reversing engineering an app and after analyzing with man-in-the-middle, I find that it obfuscates its messages to the server so it looks like a gibberish. String stc = ("msg=" + ...
r3verse3ngineer's user avatar
2 votes
0 answers
139 views

How can I detect which Android native function that is hooked by Mobile Substrate: MSHookFunction?

I want to detect hook behavior of MSHookFunction on Android. This is Mobile Substrate I use in my test app https://github.com/Breathleas/Android-Hooking-Template-Cydia-Substrate/tree/master/jni/...
Ken Kem's user avatar
  • 121
1 vote
0 answers
242 views

deobfuscate Dexgaurd obfuscated code

I was reversing an apk. the code detects whether the apk is running on a rooted device or not. if it is rooted or an emulator it will stop and close out. so this is the snippet code which I think it ...
hanan's user avatar
  • 309
2 votes
0 answers
219 views

ghidra assigns local variable to register

im reversing a android native library and im trying to understand how a token is generated the toke n is passed to a callback java method and i traced where the method is getting called from this is ...
ahmed mani's user avatar
1 vote
1 answer
418 views

HELP Decrypting Lua files

i'm trying to mod a game named : DDTank Mobile, which is on both Android & IOS. This game runs on cocos2d engine, the thing is the lua files are encrypted. I read somewhere to look for 'sign' at ...
TroPicz MoDzy's user avatar
1 vote
0 answers
249 views

reverse engineering an APK file to find HTTP requests in the source code

I've extracted an apk(react native) with dex2jar and jar to java through jd-qui and also with apktool, and I can view the source code but there is no clue where are the HTTP requests in the source ...
user42721's user avatar
3 votes
0 answers
415 views

How to decompile an APK written in Golang?

I recently started trying to learn basic reverse engineering and Golang. Decompiling Android apps written in C++ and Java/Kotlin seems easy as there are tons of documents and tools that enable you to ...
CJK's user avatar
  • 31
3 votes
0 answers
255 views

Next steps for android native library RE (JNI_OnLoad, root check)

I'm trying to RE an Android app that detects root on a system. Using frida to backtrace 'access' calls I found out that the root check happens natively: access(/system/xbin/su, 0x0) Interceptor ...
Linus's user avatar
  • 31
2 votes
0 answers
72 views

Reverse engineering of Process manager apk

Is there someone helps me to understand how to build the server of this apk https://lab52.io/blog/complete-dissection-of-an-apk-with-a-suspicious-c2-server/ ? I tried to disassemble the apk but it is ...
Gregor's user avatar
  • 37
0 votes
0 answers
35 views

Malware apk in Android [duplicate]

Is there some website where i'm able to find malware apk filtering by permission (for instance: RECORD_AUDIO)? I'm looking for website similar to pithus
Gregor's user avatar
  • 37
1 vote
2 answers
960 views

Decompiling and Recompiling APK leads to crash using Apktool

Decompiling and recompiling an apk causes it to crash. My goal is simply to insert a method into smali code that prints a stacktrace, but even decompiling and recompiling with no changes causes the ...
Sid's user avatar
  • 121
2 votes
0 answers
777 views

frida cant cast string array to java.lang.object

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); the last parameter is a string list casted to java.lang.object the way ...
ahmed mani's user avatar
2 votes
0 answers
14 views

Need help injecting SSID into Momentum app checking for device wifi

Hello so I'm trying to add a device onto my Genymotion emulated device but to add it the app needs to detect the AP. this is the logcat of just the apps logs If anyone can help let me know im trying ...
Sierra boulanger's user avatar
2 votes
0 answers
164 views

SSL Pinning React Native

I'm trying to remove SSL pinning with Android device. I've tried different techniques like hooking the app with Objection, re-pinning with Frida, using the SSLUnpinning app from the Xposed repo, etc. ...
user avatar
1 vote
0 answers
736 views

frida calling method raises error pointer expected

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); whenever i try to call it and pass the needed arguments it raises a ...
ahmed mani's user avatar
1 vote
0 answers
119 views

Where can I find the hashing algorithm in source code?

When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following email & pass : "[email protected]:abc" it ...
Dino's user avatar
  • 11

1
2 3 4 5
8