Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

2
votes
0answers
44 views

Joysmade USB/WiFi microscope

Short intro: I am building an electronics workbench, and I needed a microscope. This Joysmade USB/WiFi microscope was $45, and it would work with exception to the below issues. My "dumb" TV was set ...
0
votes
1answer
88 views

Android APK reversing - Can't find the Main Class

I am reverse engineering an APK file. From the AndroidManifest.xml file, I found the class name (com.dfmlhsd.xecpwdugfsln.hnzpsm.KeQXGRNGu) corresponding to Main Action as shown below: <...
4
votes
2answers
84 views

Disassemble ELF - PC is set to 0?

I tried to disassemble a ELF file which is a shared object file executed on armv7a (Android). I saw a strange block. It seems that the PC, program counter register, is set to 0. Did I miss something ...
0
votes
0answers
120 views

Decrypt package containing update files for Android system

One of the car manufacturer provides zip packages with updates of their Android based head units. Zip package is served for HU on USB stick as a single file located in root directory - discovered ...
0
votes
1answer
45 views

Proxy debugging tool doesn't capture traffic from some online games

I'm analyzing Android games with Fiddler 2 to see how the game collects data. There is a problem, both Fiddler 2 and Charles Proxy doesn't capture any traffic from some online games. All i got are ads ...
0
votes
0answers
45 views

APK won't work anymore after compiling

I'm trying to reverse engineering an android app. Unpacked the APK with APKTOOL and edited some smali. Packed again and the app won't work (stuck on the first activity). Thought that I had done ...
2
votes
1answer
63 views

Is it possible to check what engine was used to produce an Android game?

I want to know what engine was used (if any) to produce an Android game, is it possible? What to look for in decompiled apk? Or maybe I have to check with a proxy for some certain http requests? Or ...
0
votes
1answer
51 views

What does “Process exited cleanly (number)” mean?

I'm trying to bypass the security that checks if a file is modified on an android app and will crash without error if modified. It have around 10 fake crashes. I have bypassed some of them in smali ...
0
votes
0answers
219 views

Bypass/Remove Install Referrer to let apk Install not from Google Play Store

Helo, I mod unity game to tweak some ability in assembly-csharp.dll. In nox emulator, non-root or rooted, install success and mod work. But i have problem in non root phone. If I install it when ...
1
vote
0answers
30 views

Missing Map from Java Native Method to C Code

When writing a C implementation for a native Java method in Android, the rule is to name the C function according to the convention "Java_com_...". But I encountered an APK in which there are no such ...
1
vote
1answer
78 views

Reversing video protocol for chinese drone so i can view the stream outside of the app

I am trying to view the video stream of the vento protocol air drone on my computer. The final goal is to get the video stream into python or c++ for opencv; however, if i can just view it in a ...
2
votes
1answer
94 views

Android 7.0+ Monitoring application HTTPS requests

I am trying to capture https requests an application performs during runtime without any success yet. Different failing approaches, using mitmproxy / charles proxy and user ca certificates, obtaining ...
2
votes
1answer
175 views

android unity intercept w/ Frida

I'm trying to extract symbols from an Android Unity game to detect something related to the game which I can intercept and replace variables. The following code will enumerate symbols from libmain.so,...
3
votes
1answer
70 views

does android apk contain game mechanics?

Let's say I have an apk of an android fighting game. The mechanics of the game includes how characters use their skills, how the damages are calculated, etc. Are such mechanics stored within the apk? ...
0
votes
0answers
83 views

How do I obtain database key in IDA pro/Hex RAYS from decompiled .SO lib?

I'm new to reverse engineering and I found a .SO library inside an android app. I wanted to reverse engineer it to find the key used to encrypt the local database that the game uses for characters. ...
1
vote
0answers
22 views

Is there any way to get value from bytecode under JDWP without access to source?

When I debug android app through jdwp using jdb, it seems I can't get anything from the bytecode level. I know normally it's fine as long as we have the source line info and use a decompiler, but the ...
1
vote
1answer
91 views

How to find the executable code of the native method in the library * .so? (Android)

I'm doing reverse engineering of a mobile application for android and I had a question how to find the executable code of the native method in the library * .so. From the code of the code, the native ...
2
votes
0answers
97 views

frida hook jni not work

I want to trace Android Telegram app(open-source) to learn its protocol. From the source code these two functions AES_set_encrypt_key and AES_ctr128_encrypt are used to do the encryption, and I can ...
2
votes
1answer
224 views

Does Google encrypt APK when downloading it from Play Store?

I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log. In ancient times Google downloaded APK directly how it is ...
0
votes
1answer
107 views

Android Reverse Engineering Network Traffic Stack Trace

Lets say an Android application sends out a traffic out to the server and expects a Json Response Request: https://server:port/userid=user1&token=randomstring7345 We want to replicate the ...
4
votes
1answer
54 views

What does a C++ identifier ending in $_## mean?

In trying to understand a .so from an Android game made with Cocos2d-x, I've come across identifiers like the following (after demangling): SceneActionMap::updateTalkMode(float)::$_37 SceneActionMap::...
2
votes
2answers
196 views

How can I make sense of an Android NDK library?

So I'm currently trying to understand how an Android app interprets the data sent from a Bluetooth-enabled scale. Understanding the Java code was relatively easy. The code was obfuscated but I found ...
-1
votes
2answers
35 views

How to view SDK files and is it mandatory to run modified apk on rooted device

I am performing reverse engineering on android apk using apktool. Is there any way I can view the code in SDK/NDK files ? if i make any change in the .smali files is it necessary to run the modified ...
0
votes
0answers
184 views

De Obfuscate Beebytes

I have tried two tools to de-obfuscate an assembly c-sharp.dll file. By decompiling the .dll file I was able to find the class describing the obfuscation as Beebytes, the the two programs were the ...
0
votes
1answer
37 views

How can I open id0, id1, nam, so, or til files?

I am attempting to reverse engineer the DYMO Connect app in order to learn how to print to a DYMO LabelWriter Wireless printer. However, the mobile driver for the printer is in several different ...
2
votes
1answer
110 views

JAVA Decryption - Reverse engineering an Android application

I am trying to decrypt an encrypted string, but I am stuck in Ciper.doFinal() where the decryption throws a BadPaddingException. The string in question is 3qBogw/PIqpErH/DyEHLTQ==. One thing I know is ...
0
votes
0answers
61 views

Help with an APK

I am trying to get some data from a game called "Chain Strike". A mobile game from Com2Us. It's a unity based game. I was able to find sprites, textures, and sounds in the asset bundles, but what I ...
1
vote
2answers
137 views

How to reverse engineer mobile app image?

Scenario On my phone I have an app. When I login into the app and goto my profile there is an profile picture of me. I want to that picture because I need it. Simple way is just goto an local shop an ...
3
votes
3answers
1k views

What are the tools use for reverse engineering android apk?

Currently, I only know about apktool. But is there any tools that helps in checking the code, editing it and compiling it back to apk?
0
votes
2answers
211 views

verifyError in youtube android app modification

I try to decompile youtube android application and modify it but when I build the application and install on a virtual device faced with below error: E/AndroidRuntime(1782): java.lang.VerifyError: ...
0
votes
0answers
33 views

IDA Android debug: SP address out of memory range of the stack view

I use IDA to debug android so lib, the SP address is 0xBEBD9B08, but it is out of the memory range of the stack view and Hex view. So I can't see the value of the local variables. I know there is one ...
2
votes
0answers
43 views

How to update reversed code of an updated application?

A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code? I searched for ways ...
1
vote
3answers
234 views

Android- hiding private keys in .so file

I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
0
votes
0answers
91 views

frida hook java.security.MessageDigest.update cause crash

I'm trying to hook android's md5 function with frida, here' my code: Java.perform(function () { var MessageDigest = Java.use("java.security.MessageDigest"); MessageDigest.update.overload('[B')...
2
votes
1answer
614 views

Got `Source Code does not match bytecode` debug a Reversed Android app

Reverse an .apk file following This Article Open ApkStudio, edit AndroidManifest.xml to allow debug and Build a new Apk file Got source code with dex2jar and jd-gui Create an project in Android ...
0
votes
0answers
42 views

How complete is a reverse engineered swf file? [duplicate]

Could I decompile a swf and load the result into say a flash develop project and it would compile without any errors?
0
votes
0answers
42 views

analyse android uninstall flow

I want to make my Android app to open browser with specific URL after getting uninstalled using C code w/ JNI. I want to analyse what android ( system_server ? ) does during uninstall, see the ...
1
vote
1answer
845 views

print [B byte array in frida js script

I'm learning frida and trying to hook a function that looks like: `.method public final fn()[B` It returns a byte array. Here's my code: Java.perform(function () { var test = Java.use("com...");...
0
votes
0answers
108 views

Reversing an APK to replicate API, X-Request-Sign5

I have been reverse engineering an APK in order to create a Desktop client for an app (just for fun to improve my analytical/programming skills). I have, however, hit a snag. Most requests sent to ...
-1
votes
1answer
124 views

Whether samples downloaded from virus share can execute automatically in my computer

I am doing some android malware analysis work and downloaded many android samples in virus share, but I found some of them are windows malware e.g. labeled 'win32' or something. Are these windows ...
0
votes
0answers
48 views

Reverse engineer hash generation inside app

I am trying to reverse engineer an app that passes a generated string in HTTP headers. I have tried APKTool to see if I can find the algorithm behind its generation, but I was never able to find the ...
0
votes
0answers
170 views

ELF hook function by address

I used this to intercept (https://github.com/asLody/ElfHook). Everything is simple enough, but here's the question. Let's say I want to intercept a function, not by its name, by its address, as in the ...
1
vote
2answers
238 views

IDA Pro Search classes within a Dex file inclusive of package name

Let's just assume that our classes.dex file has a class: com.example.MyClass in which there's a method "meth": public final com.example.MyClass.meth(java.lang.String p0) how/where can I search the ...
1
vote
1answer
1k views

Inject code into JNI function (Android shared library)

An android app loads a native library (.so) using System.loadLibrary. It then calls a specific function, which takes 3 input variables, and returns a string containing a MD5 hash. You can see the ...
0
votes
1answer
38 views

Android debugging, stop before app starts on third party app

I'm trying to dump a few pieces of info that happen at the very beginning of the start up of a third party app and not after the app is running. I have debugged on other platforms and there is usually ...
0
votes
1answer
374 views

Debugging third party apk without modifying apk

I have seen the ways to modify an apk using apktools and adding android:debugging="true" but I have an apk that check for changes and crashes if any changes are made. Is it possible to capture the ...
1
vote
1answer
211 views

JNI_onLoad not presented in .so (Android)

I'm trying to analyze a .so file that is ran on android. Loading the file into IDA I'm unable to spot the JNI_onLoad. So I dumped the .so to memory and I'm still unable to spot the JNI_onLoad. ...
3
votes
1answer
347 views

Animal Crossing: Pocket Camp .zdat File

Hello I am trying to obtain the music from the new game Animal Crossing: Pocket Camp. The music is contained in files like these: https://download-cdn-ac-pocketcamp.akamaized.net/assets/...
1
vote
0answers
600 views

Attaching to Dalvik static function using Frida in order to disable emulator detection

I have a re-occuring issue with Frida (I'm using Frida and Frida-Server for Android x86_64 ver.: 10.6.11), where I try to hook a function and override its functionality, but for some reason I get ...
0
votes
4answers
700 views

Unpacking xamarin mono dll from libmonodroid_bundle.app.so

I have an apk that was written in xamarin. The meta data suggests there are lots of dlls files this application uses. I found a file called libmonodroid_bundle_app.so which when disassembled in IDA ...