Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

0
votes
0answers
17 views

Bypass/Remove Install Referrer to let apk Install not from Google Play Store

Helo, I mod unity game to tweak some ability in assembly-csharp.dll. In nox emulator, non-root or rooted, install success and mod work. But i have problem in non root phone. If I install it when ...
-2
votes
0answers
55 views

PIE bypass in /system/bin/linker [closed]

I tried to remove PIE error from my linker by this manual, but I can not find "data xref" line near this error. What to do? .rodata:0000B1F9 aErrorOnlyPosit DCB "error: only position independent ...
1
vote
0answers
27 views

Missing Map from Java Native Method to C Code

When writing a C implementation for a native Java method in Android, the rule is to name the C function according to the convention "Java_com_...". But I encountered an APK in which there are no such ...
0
votes
1answer
66 views

Reversing video protocol for chinese drone so i can view the stream outside of the app

I am trying to view the video stream of the vento protocol air drone on my computer. The final goal is to get the video stream into python or c++ for opencv; however, if i can just view it in a ...
2
votes
1answer
71 views

Android 7.0+ Monitoring application HTTPS requests

I am trying to capture https requests an application performs during runtime without any success yet. Different failing approaches, using mitmproxy / charles proxy and user ca certificates, obtaining ...
2
votes
0answers
53 views

android unity intercept w/ Frida

I'm trying to extract symbols from an Android Unity game to detect something related to the game which I can intercept and replace variables. The following code will enumerate symbols from libmain.so,...
3
votes
1answer
62 views

does android apk contain game mechanics?

Let's say I have an apk of an android fighting game. The mechanics of the game includes how characters use their skills, how the damages are calculated, etc. Are such mechanics stored within the apk? ...
0
votes
0answers
70 views

How do I obtain database key in IDA pro/Hex RAYS from decompiled .SO lib?

I'm new to reverse engineering and I found a .SO library inside an android app. I wanted to reverse engineer it to find the key used to encrypt the local database that the game uses for characters. ...
1
vote
0answers
20 views

Is there any way to get value from bytecode under JDWP without access to source?

When I debug android app through jdwp using jdb, it seems I can't get anything from the bytecode level. I know normally it's fine as long as we have the source line info and use a decompiler, but the ...
1
vote
1answer
63 views

How to find the executable code of the native method in the library * .so? (Android)

I'm doing reverse engineering of a mobile application for android and I had a question how to find the executable code of the native method in the library * .so. From the code of the code, the native ...
2
votes
0answers
33 views

frida hook jni not work

I want to trace Android Telegram app(open-source) to learn its protocol. From the source code these two functions AES_set_encrypt_key and AES_ctr128_encrypt are used to do the encryption, and I can ...
2
votes
1answer
159 views

Does Google encrypt APK when downloading it from Play Store?

I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log. In ancient times Google downloaded APK directly how it is ...
0
votes
1answer
92 views

Android Reverse Engineering Network Traffic Stack Trace

Lets say an Android application sends out a traffic out to the server and expects a Json Response Request: https://server:port/userid=user1&token=randomstring7345 We want to replicate the ...
4
votes
1answer
48 views

What does a C++ identifier ending in $_## mean?

In trying to understand a .so from an Android game made with Cocos2d-x, I've come across identifiers like the following (after demangling): SceneActionMap::updateTalkMode(float)::$_37 SceneActionMap::...
2
votes
2answers
116 views

How can I make sense of an Android NDK library?

So I'm currently trying to understand how an Android app interprets the data sent from a Bluetooth-enabled scale. Understanding the Java code was relatively easy. The code was obfuscated but I found ...
-1
votes
2answers
33 views

How to view SDK files and is it mandatory to run modified apk on rooted device

I am performing reverse engineering on android apk using apktool. Is there any way I can view the code in SDK/NDK files ? if i make any change in the .smali files is it necessary to run the modified ...
0
votes
0answers
130 views

De Obfuscate Beebytes

I have tried two tools to de-obfuscate an assembly c-sharp.dll file. By decompiling the .dll file I was able to find the class describing the obfuscation as Beebytes, the the two programs were the ...
0
votes
1answer
29 views

How can I open id0, id1, nam, so, or til files?

I am attempting to reverse engineer the DYMO Connect app in order to learn how to print to a DYMO LabelWriter Wireless printer. However, the mobile driver for the printer is in several different ...
2
votes
1answer
99 views

JAVA Decryption - Reverse engineering an Android application

I am trying to decrypt an encrypted string, but I am stuck in Ciper.doFinal() where the decryption throws a BadPaddingException. The string in question is 3qBogw/PIqpErH/DyEHLTQ==. One thing I know is ...
0
votes
0answers
60 views

Help with an APK

I am trying to get some data from a game called "Chain Strike". A mobile game from Com2Us. It's a unity based game. I was able to find sprites, textures, and sounds in the asset bundles, but what I ...
1
vote
2answers
118 views

How to reverse engineer mobile app image?

Scenario On my phone I have an app. When I login into the app and goto my profile there is an profile picture of me. I want to that picture because I need it. Simple way is just goto an local shop an ...
3
votes
3answers
367 views

What are the tools use for reverse engineering android apk?

Currently, I only know about apktool. But is there any tools that helps in checking the code, editing it and compiling it back to apk?
0
votes
2answers
134 views

verifyError in youtube android app modification

I try to decompile youtube android application and modify it but when I build the application and install on a virtual device faced with below error: E/AndroidRuntime(1782): java.lang.VerifyError: ...
0
votes
0answers
32 views

IDA Android debug: SP address out of memory range of the stack view

I use IDA to debug android so lib, the SP address is 0xBEBD9B08, but it is out of the memory range of the stack view and Hex view. So I can't see the value of the local variables. I know there is one ...
2
votes
0answers
41 views

How to update reversed code of an updated application?

A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code? I searched for ways ...
1
vote
3answers
164 views

Android- hiding private keys in .so file

I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
0
votes
0answers
66 views

frida hook java.security.MessageDigest.update cause crash

I'm trying to hook android's md5 function with frida, here' my code: Java.perform(function () { var MessageDigest = Java.use("java.security.MessageDigest"); MessageDigest.update.overload('[B')...
2
votes
1answer
444 views

Got `Source Code does not match bytecode` debug a Reversed Android app

Reverse an .apk file following This Article Open ApkStudio, edit AndroidManifest.xml to allow debug and Build a new Apk file Got source code with dex2jar and jd-gui Create an project in Android ...
0
votes
0answers
37 views

How complete is a reverse engineered swf file? [duplicate]

Could I decompile a swf and load the result into say a flash develop project and it would compile without any errors?
0
votes
0answers
39 views

analyse android uninstall flow

I want to make my Android app to open browser with specific URL after getting uninstalled using C code w/ JNI. I want to analyse what android ( system_server ? ) does during uninstall, see the ...
1
vote
1answer
500 views

print [B byte array in frida js script

I'm learning frida and trying to hook a function that looks like: `.method public final fn()[B` It returns a byte array. Here's my code: Java.perform(function () { var test = Java.use("com...");...
0
votes
0answers
89 views

Reversing an APK to replicate API, X-Request-Sign5

I have been reverse engineering an APK in order to create a Desktop client for an app (just for fun to improve my analytical/programming skills). I have, however, hit a snag. Most requests sent to ...
-1
votes
1answer
109 views

Whether samples downloaded from virus share can execute automatically in my computer

I am doing some android malware analysis work and downloaded many android samples in virus share, but I found some of them are windows malware e.g. labeled 'win32' or something. Are these windows ...
0
votes
0answers
46 views

Reverse engineer hash generation inside app

I am trying to reverse engineer an app that passes a generated string in HTTP headers. I have tried APKTool to see if I can find the algorithm behind its generation, but I was never able to find the ...
0
votes
0answers
132 views

ELF hook function by address

I used this to intercept (https://github.com/asLody/ElfHook). Everything is simple enough, but here's the question. Let's say I want to intercept a function, not by its name, by its address, as in the ...
1
vote
2answers
179 views

IDA Pro Search classes within a Dex file inclusive of package name

Let's just assume that our classes.dex file has a class: com.example.MyClass in which there's a method "meth": public final com.example.MyClass.meth(java.lang.String p0) how/where can I search the ...
1
vote
1answer
895 views

Inject code into JNI function (Android shared library)

An android app loads a native library (.so) using System.loadLibrary. It then calls a specific function, which takes 3 input variables, and returns a string containing a MD5 hash. You can see the ...
0
votes
1answer
36 views

Android debugging, stop before app starts on third party app

I'm trying to dump a few pieces of info that happen at the very beginning of the start up of a third party app and not after the app is running. I have debugged on other platforms and there is usually ...
0
votes
1answer
324 views

Debugging third party apk without modifying apk

I have seen the ways to modify an apk using apktools and adding android:debugging="true" but I have an apk that check for changes and crashes if any changes are made. Is it possible to capture the ...
1
vote
1answer
173 views

JNI_onLoad not presented in .so (Android)

I'm trying to analyze a .so file that is ran on android. Loading the file into IDA I'm unable to spot the JNI_onLoad. So I dumped the .so to memory and I'm still unable to spot the JNI_onLoad. ...
3
votes
1answer
335 views

Animal Crossing: Pocket Camp .zdat File

Hello I am trying to obtain the music from the new game Animal Crossing: Pocket Camp. The music is contained in files like these: https://download-cdn-ac-pocketcamp.akamaized.net/assets/...
1
vote
0answers
516 views

Attaching to Dalvik static function using Frida in order to disable emulator detection

I have a re-occuring issue with Frida (I'm using Frida and Frida-Server for Android x86_64 ver.: 10.6.11), where I try to hook a function and override its functionality, but for some reason I get ...
0
votes
4answers
614 views

Unpacking xamarin mono dll from libmonodroid_bundle.app.so

I have an apk that was written in xamarin. The meta data suggests there are lots of dlls files this application uses. I found a file called libmonodroid_bundle_app.so which when disassembled in IDA ...
0
votes
1answer
159 views

charles proxy only showing portion of requests?

So i wanted to see the endpoints of this android/ios app calles "Bigo Live". Like always, i've set up charles and started trackig. Funnily, it only shows part of the traffic. for example: If i use ...
0
votes
1answer
598 views

Need help reversing an Android Game

I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
2
votes
1answer
384 views

APK Tools for Tinder 7.4.0 [closed]

I wanted to make some Tinder tools, and found some already made APIs. I would like go through the process of discovering this private API by myself, since most of the articles are a bit out of date. ...
0
votes
1answer
388 views

Security bypass: How to run application in Android Emulator?

I need to run "Yanosik" in Android Emulator Genymotion. Developers block in app runnning it in Android Emulator - when I try download it via Playstore, it says that my device is incompatible. When I ...
1
vote
2answers
492 views

Opening non-standard PNG files extracted from Android app - missing signature and IHDR chunk

I am unable to open PNG files extracted from a certain Android app. I can't open them with the stock Android Gallery app. I can't open them in image browsers after downloading them on my computer. ...
0
votes
0answers
82 views

How do I move a menu item on an android app?

I am experimenting with modding menu items in an android app. The app I am working with is RAR. I want to move some menu items to the main action bar menu, in my case, I chose the "About" command. ...
1
vote
1answer
210 views

Dolphin Emulator Android port modifications

I am modifying the Dolphin Emulator Alpha for android, but I'm having some trouble with a string in it's smali code. The value I am having trouble with is dolphin-emu, it is the name of the folder ...