Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

-1
votes
1answer
36 views

decomplied apk with bad parameters

I'm trying to reverse engineering an android app API so this is what I tried: First the app was using Okhttp certificate pinning and I couldn't track the URLs with Charles then I tried this method ...
2
votes
1answer
61 views

Extract a secret from an Android apk or .so file

Context As an exercise I am researching all methods of hiding a secret in an android mobile app binary... Yes I know that with more or less effort they can always be extracted with static analyses, ...
-1
votes
0answers
32 views

IDA Dalvik debugger on Andoid Device JDWP error: INVALID_OBJECT

IDA Dalvik debugger on Android Emulator throws JDWP error: INVALID_OBJECT, and then IDA hangs and not able to figure out why its happening.
0
votes
1answer
45 views

Android application can't open pasted SQLite database

So I have an installed application on my Android phone and it stores some data in an password protected SQLite database in the /data/data//databases/ folder. I used adb shell to move the database to ...
1
vote
1answer
27 views

WebSocket debugging in Javascript app gives “401 Unauthorized” [closed]

I'm attempting to reverse engineer a private API used by an Android app that makes use of WebSockets. These requests are made from JavaScript inside a WebView. I use Charles to intercept both HTTP ...
2
votes
1answer
69 views

Sniffing serial Bluetooth traffic on Android

Related to UE Megaboom serial protocol: I am trying to get some insights on the serial protocol spoken by the UE Megaboom, which I suspect is how the app controls the advanced features of the speaker. ...
1
vote
0answers
56 views

Detect compression algorithm in .NPK archive

I'am trying to unpack Android game archive file (.NPK). The game is "Nvidia Glowball demo" (it has been pre-installed on my android tablet) Archive structure seems to be simple, but I can't ...
1
vote
0answers
36 views

Android APK is somehow verifying package signatures without calling PackageManager.signatures

I'm reverse engineering a very popular Android app. They perform some type of signature verification on the APK, however they do it without: Calling PackageManager.signatures Calling PackageInfo....
2
votes
1answer
100 views

Find function in a stripped dynamic ELF library

Im currently reverse engineering an android app and this app calls a function named "getUserInfo" in an ARM 32bit ELF library called "libcms.so" via the Java Native Interface. My Problem is: The ...
2
votes
1answer
38 views

Enumerating (name, addresses) in PLT of an ELF file without elf.h

I want to show users imported symbols of a given ELF file like this(#1) in a disassembler project.(Android app) 1d21a: f7fa e8e8 blx 173ec ; __android_log_print@plt ... Currently, I can only show ...
1
vote
0answers
40 views

How to patch JNI library to call functions on Linux

According to this post it is possible to run functions inside a shared library so long as they do not have a dependency on the JVM It works by patching the .dynamic ELF section to remove ...
5
votes
1answer
159 views

How does API call work on Android (NDK)?

In windows platform, an application usually references its IAT(Import Access Table) to get the address of the APIs it wants, then call it. Then some mechanisms are done as demonstrated here nicely. ...
1
vote
0answers
44 views

Common practices for 'hiding' a class within an Android application?

I've recently gotten into Android reverse engineering, and I've been messing around with some apps lately for education/research purposes to see how some things are done with private (mobile) APIs. ...
1
vote
0answers
49 views

Reversing Android BLE Application not showing in logcat

I'm new to reversing and I would like to reverse a BLE Android Application. (jbsmartbulb) I have seen in the package com.actions.ibluz.b this call : public void onCharacteristicWrite(final ...
-1
votes
1answer
77 views

Gdbserver and idapro

I would like to reverse a file so of an apk using idapro (on windows) and gdbserver(on remote target device) . I arrived until the attach of the running process. But after? Is there a tutorial ...
9
votes
2answers
5k views

How difficult is to decompile C++ file?

I am writing an Android app with AES encryption and I am going to save AES key as a string to a C++ file with extension .cpp. I am also going to create an iOS app which will use the same AES key. Is ...
-2
votes
1answer
334 views

How to use IDA Pro debug Android Application? [closed]

Any person can give some examples or resources about how to use IDA Pro debug Android Application?
0
votes
0answers
30 views

Where should I hook more to analyze android Bluetooth communication?

I wanted to learn how other bluetooth applications connects bluetooth OBject EXchange Object Push Profile , as my app continuously threw famous errors socket might closed are timeout; read() ret : -...
2
votes
0answers
63 views

Joysmade USB/WiFi microscope

Short intro: I am building an electronics workbench, and I needed a microscope. This Joysmade USB/WiFi microscope was $45, and it would work with exception to the below issues. My "dumb" TV was set ...
1
vote
1answer
324 views

Android APK reversing - Can't find the Main Class

I am reverse engineering an APK file. From the AndroidManifest.xml file, I found the class name (com.dfmlhsd.xecpwdugfsln.hnzpsm.KeQXGRNGu) corresponding to Main Action as shown below: <...
4
votes
2answers
107 views

Disassemble ELF - PC is set to 0?

I tried to disassemble a ELF file which is a shared object file executed on armv7a (Android). I saw a strange block. It seems that the PC, program counter register, is set to 0. Did I miss something ...
0
votes
2answers
106 views

Proxy debugging tool doesn't capture traffic from some online games

I'm analyzing Android games with Fiddler 2 to see how the game collects data. There is a problem, both Fiddler 2 and Charles Proxy doesn't capture any traffic from some online games. All i got are ads ...
2
votes
1answer
73 views

Is it possible to check what engine was used to produce an Android game?

I want to know what engine was used (if any) to produce an Android game, is it possible? What to look for in decompiled apk? Or maybe I have to check with a proxy for some certain http requests? Or ...
0
votes
1answer
80 views

What does “Process exited cleanly (number)” mean?

I'm trying to bypass the security that checks if a file is modified on an android app and will crash without error if modified. It have around 10 fake crashes. I have bypassed some of them in smali ...
1
vote
0answers
41 views

Missing Map from Java Native Method to C Code

When writing a C implementation for a native Java method in Android, the rule is to name the C function according to the convention "Java_com_...". But I encountered an APK in which there are no such ...
1
vote
1answer
136 views

Reversing video protocol for chinese drone so i can view the stream outside of the app

I am trying to view the video stream of the vento protocol air drone on my computer. The final goal is to get the video stream into python or c++ for opencv; however, if i can just view it in a ...
2
votes
1answer
151 views

Android 7.0+ Monitoring application HTTPS requests

I am trying to capture https requests an application performs during runtime without any success yet. Different failing approaches, using mitmproxy / charles proxy and user ca certificates, obtaining ...
2
votes
1answer
503 views

android unity intercept w/ Frida

I'm trying to extract symbols from an Android Unity game to detect something related to the game which I can intercept and replace variables. The following code will enumerate symbols from libmain.so,...
3
votes
1answer
99 views

does android apk contain game mechanics?

Let's say I have an apk of an android fighting game. The mechanics of the game includes how characters use their skills, how the damages are calculated, etc. Are such mechanics stored within the apk? ...
-1
votes
0answers
121 views

How do I obtain database key in IDA pro/Hex RAYS from decompiled .SO lib?

I'm new to reverse engineering and I found a .SO library inside an android app. I wanted to reverse engineer it to find the key used to encrypt the local database that the game uses for characters. ...
1
vote
0answers
41 views

Is there any way to get value from bytecode under JDWP without access to source?

When I debug android app through jdwp using jdb, it seems I can't get anything from the bytecode level. I know normally it's fine as long as we have the source line info and use a decompiler, but the ...
1
vote
1answer
249 views

How to find the executable code of the native method in the library * .so? (Android)

I'm doing reverse engineering of a mobile application for android and I had a question how to find the executable code of the native method in the library * .so. From the code of the code, the native ...
2
votes
0answers
285 views

frida hook jni not work

I want to trace Android Telegram app(open-source) to learn its protocol. From the source code these two functions AES_set_encrypt_key and AES_ctr128_encrypt are used to do the encryption, and I can ...
2
votes
1answer
472 views

Does Google encrypt APK when downloading it from Play Store?

I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log. In ancient times Google downloaded APK directly how it is ...
0
votes
1answer
152 views

Android Reverse Engineering Network Traffic Stack Trace

Lets say an Android application sends out a traffic out to the server and expects a Json Response Request: https://server:port/userid=user1&token=randomstring7345 We want to replicate the ...
4
votes
1answer
58 views

What does a C++ identifier ending in $_## mean?

In trying to understand a .so from an Android game made with Cocos2d-x, I've come across identifiers like the following (after demangling): SceneActionMap::updateTalkMode(float)::$_37 SceneActionMap::...
2
votes
2answers
448 views

How can I make sense of an Android NDK library?

So I'm currently trying to understand how an Android app interprets the data sent from a Bluetooth-enabled scale. Understanding the Java code was relatively easy. The code was obfuscated but I found ...
-1
votes
2answers
37 views

How to view SDK files and is it mandatory to run modified apk on rooted device

I am performing reverse engineering on android apk using apktool. Is there any way I can view the code in SDK/NDK files ? if i make any change in the .smali files is it necessary to run the modified ...
0
votes
0answers
239 views

De Obfuscate Beebytes

I have tried two tools to de-obfuscate an assembly c-sharp.dll file. By decompiling the .dll file I was able to find the class describing the obfuscation as Beebytes, the the two programs were the ...
0
votes
1answer
87 views

How can I open id0, id1, nam, so, or til files?

I am attempting to reverse engineer the DYMO Connect app in order to learn how to print to a DYMO LabelWriter Wireless printer. However, the mobile driver for the printer is in several different ...
2
votes
1answer
169 views

JAVA Decryption - Reverse engineering an Android application

I am trying to decrypt an encrypted string, but I am stuck in Ciper.doFinal() where the decryption throws a BadPaddingException. The string in question is 3qBogw/PIqpErH/DyEHLTQ==. One thing I know is ...
-1
votes
0answers
70 views

Help with an APK

I am trying to get some data from a game called "Chain Strike". A mobile game from Com2Us. It's a unity based game. I was able to find sprites, textures, and sounds in the asset bundles, but what I ...
1
vote
2answers
182 views

How to reverse engineer mobile app image?

Scenario On my phone I have an app. When I login into the app and goto my profile there is an profile picture of me. I want to that picture because I need it. Simple way is just goto an local shop an ...
3
votes
3answers
7k views

What are the tools use for reverse engineering android apk?

Currently, I only know about apktool. But is there any tools that helps in checking the code, editing it and compiling it back to apk?
0
votes
2answers
389 views

verifyError in youtube android app modification

I try to decompile youtube android application and modify it but when I build the application and install on a virtual device faced with below error: E/AndroidRuntime(1782): java.lang.VerifyError: ...
-1
votes
0answers
46 views

IDA Android debug: SP address out of memory range of the stack view

I use IDA to debug android so lib, the SP address is 0xBEBD9B08, but it is out of the memory range of the stack view and Hex view. So I can't see the value of the local variables. I know there is one ...
2
votes
0answers
55 views

How to update reversed code of an updated application?

A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code? I searched for ways ...
1
vote
3answers
388 views

Android- hiding private keys in .so file

I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
0
votes
0answers
175 views

frida hook java.security.MessageDigest.update cause crash

I'm trying to hook android's md5 function with frida, here' my code: Java.perform(function () { var MessageDigest = Java.use("java.security.MessageDigest"); MessageDigest.update.overload('[B')...
2
votes
1answer
862 views

Got `Source Code does not match bytecode` debug a Reversed Android app

Reverse an .apk file following This Article Open ApkStudio, edit AndroidManifest.xml to allow debug and Build a new Apk file Got source code with dex2jar and jd-gui Create an project in Android ...