Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Filter by
Sorted by
Tagged with
0
votes
0answers
3 views

compile gdb with python 3 for gef-ida-interact

I'm trying to use GEF's IDA-interact which has issues with python2. I'm using android-ndk-r20b/prebuilt/linux-x86_64/bin/gdb - v7.11 using Python engine 2.7 How do I compile gdb with python 3.x ? I ...
0
votes
0answers
21 views

Decrypting Lua Files from apk

similar question Decrypting Lua Files the code has been changed. this the pseudocode from LIBCOCOS2DLUA.SO >> cocos2d::FileUtilsAndroid::getData https://pastebin.com/L35Vsdyn i've search and ...
0
votes
0answers
16 views

Endoscope Camera YPC99 - how to stream on linux

I'm trying to stream video from endoscope camera YPC99 on linux PC using the WiFi connection. From what I have found so far the camera is using IP 192.168.1.1. It supports RTSP protocol on port 7070 (...
3
votes
1answer
106 views

How can I retrieve the encryption key in this code?

can anyone explain the following code? is it possible to retrieve the encryption key? I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
1
vote
1answer
56 views

Unable to intercept traffic of an android app even after patching ssl pinning

Recently, I was trying to test an app developed on Rhomobile, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can intercept other apps on my device but ...
0
votes
0answers
38 views

What is the approach to find apps(Android) to reverse engineer?

How does one "choose" an app to do reverse engineering/analysis on (say finding bugs or malicious behavior) About me: I'm a beginner at Android App RE, have used various tools to solve some CTF apps ...
0
votes
0answers
41 views

Frida finding out a decryption/decode algorithm

It's been a few days I'm working on an application to find out about an encryption it is using on a few strings received from API, but no success so far. These are the strings: ...
0
votes
0answers
24 views

can't see java file but debugger shows it is present and can access using reflection

I am debugging an android application to find out the implementation of something. I am using a debugger in Android studio from which I came to know that there is a java file that is responsible but ...
-1
votes
1answer
32 views

How do I know which class/file in apk is being used for what purpose?

I am new to this sort of stuff. I just found hardcoded public and private keys in an android app. I just can't figure out what it is being used for. Any advice on that?
1
vote
1answer
42 views

Proper way of implementing DexGuard RASP device checks

I recently came across an app that is protected with DexGuard. DexGuard claims to offer Runtime Application Self Protection (RASP), which comprises of app obfuscation and various runtime tampering ...
2
votes
1answer
38 views

What code gets executed in an ELF binary when Java loadLibrary() is called

I’ve been working on reverse engineering this android x86 ELF binary. According to my research when loadLibrary() is called the function JNI_onLoad is supposed to be executed however this binary doesn’...
1
vote
0answers
41 views

JEB Decompiler - Signature recognition engine

I've been playing around with the JEB decompiler and Android reverse engineering suite. One interesting feature they have is deobfuscation by library code matching in which 3rd party libraries out ...
0
votes
0answers
26 views

Connect and extract live raw data from bluetooth devices

I recently bought a bunch of bluetooth devices which includes fitness bands, thermometers, room temp. But I've seen that most of them don't appear in the mobile's discoverable list but connects ...
1
vote
0answers
66 views

What is the header 'X-Goog-Spatula'?

I am blackboxing an android app to write an API for it. Many of the HTTP requests sent include a mysterious header with the name X-Goog-Spatula. If I do not include this structure, the request is not ...
0
votes
0answers
30 views

How to bypass encrypted disk Android pin lock?

I have a forgotten pass code of my android device which is encrypted and ask password before boot time. How can I recover the pass or my data...
0
votes
0answers
16 views

Android dynamic UI state inspection/profiling tool

I am looking after for a command-line tool that can perform dynamic view hierarchy analysis similar to the UI tool in Android Studio https://developer.android.com/studio/debug/layout-inspector. Is ...
1
vote
0answers
48 views

Some obstacles in reversing a JNI Native library

I deleted my last question (it was not still answered and none's effort was wasted) as I got back and thought to re-read JNI documentation, to find I misinterpreted some bits. Things are now clearer ...
0
votes
0answers
52 views

Using IDA pro 7.2 and android server breakpoints problem

i have been trying to use IDA to make a breakpoints on a 4 byte memory address to find out what arm op code writes to it . yet it fails to set a breakpoint and gives me this message " Xscale support ...
0
votes
0answers
27 views

How to change the manufacturer property in the Android emulator?

I already asked this question on StackOverflow, but it is not getting attention; maybe here is a better place I am running the Android emulator that comes with the Android Studio software. I created ...
1
vote
1answer
104 views

Adding my own logging function in Smali

I am trying to logcat the parameters of a function in smali with my own function. I made a new Android studio project and wrote the function then used APKtool to retrieve the Smali file. This is my ...
1
vote
0answers
131 views

Using Frida for early and late instrumentation

I am trying to hook functions with Frida where one .so file (x.so) is loaded early and another .so file (z.so) is loaded slightly later, after some processing is done by the application. This is what ...
1
vote
2answers
56 views

Load Library Android

I Work as cybersecurity consultant and now i'am in mission to reverse engineering of mobile app. I always reverse it using Jadx and dex2jar ... the problem that after reverse them i found some native ...
0
votes
1answer
111 views

How to reverse engineering a proguarded .apk? [closed]

Lets say you have android1.apk file coded with proguard enable. I want to reverse engineer it in such a way that it shows the original methods names instead letters of alphabets, example bellow ...
0
votes
0answers
20 views

When debugging SMALI what are the unexplorable byte[]s loaded into registers?

I'm trying to debug an android application that takes a base 64 string, decodes it to bytes then returns an object with the bytes in one of the object's fields. When using smalidea with android ...
0
votes
1answer
72 views

How to Modify CBZ Branch in ARM64?

If I want after running the CBZ W0, loc_C5C8 command Run to the ADRP X8,#selRef_curent_version@PAGE command regardless of the condition (in picture), what should I do?
0
votes
0answers
62 views

`__MTA_DEVICE_INFO__` Android device property - what is it?

I found attempt to read __MTA_DEVICE_INFO__ system property via Android content provider call method in external reversed APK security related code: Bundle bundle = ContentResolver.call(URI.parse("...
1
vote
1answer
57 views

How to use x64-86 elf file from an apk file in a linux machine?

I'm building a jar file that use jni to load an x86-64 elf extracted from Android apk file. But when I run my app, it throw this exception: Caused by: java.lang.UnsatisfiedLinkError: /lib/x86_64-...
0
votes
0answers
42 views

application does not start after resigning apk

I am trying do to some minor modifications (add a log line) to a third-party android application. However, the basic issue I am facing is that the application does not start, even when the only thing ...
1
vote
0answers
42 views

Strange behaviour debugging Android ARM binary with gdbserver

I'm trying to run this armv5 binary from OWASP's mobile security guide (validate) using Android Studio's emulator on my x86_64 machine. I'm seeing very weird behaviour and would appreciate any ...
1
vote
0answers
63 views

Google Maps, Android serialisation format

I've come across an SQLite database (gmm_storage.db) used by Google Maps on Android, and I'm unsure as to how the data it contains is serialised. For example: I'm saying serialised, as from the ...
0
votes
0answers
161 views

LOG Urls that APK requests using smali

I have an APK that uses pinning. I am having an unbelievable time trying to remove the SSL pinning so i figure it might be easier to modify the smali files and recompile to log the LoadURL events. ...
0
votes
1answer
83 views

How to figure out which button I'm pressing

I'm working on an app, that I'm trying to get to work on a android device that has additional buttons. The device is called a BH95, from BATL. It has 4 side buttons(1 volume up, 1 power button, 2 ...
3
votes
1answer
64 views

What binary value does Thread and Process ID Register contains in Android ARM?

I have following instructions in Android shared library: MRC p15, 0, R3,c13,c0, 3 LDR R3, [R3,#4] MOV R0, #0 STR R0, [R3,#0xC] According to ARM documentation: Reading or writing the Thread and ...
2
votes
1answer
105 views

APK static analysis tools - frameworks used, vulnerability checks, etc? [closed]

I'm familiar with tools for unpacking/decompiling APKs - JADX, apktool, dex2jar, JD-GUI, and the like. I'm curious if there are tools which automate other useful tasks when reversing an APK, such as: ...
0
votes
1answer
95 views

Is there a way to reverse engineer this small tool “website2apk” and design my own? [closed]

I recently came across this tool and was amazed by its size and how it can build release-apk, without even bothering about Android development environment set up on the machine, neither Cordova nor ...
0
votes
1answer
52 views

Why does this command crash IDA Android native debugger?

In Android shared library that heavily protected against debugging, I found following code: CODE32 ldr pc, [pc, #-4] For me, this instruction looks like NOP; it just jumps to next instruction in ARM ...
2
votes
1answer
203 views

Radare2 - How to debug Android native code (dynamic analysis)?

I'm using Termux(root) on LineageOS 16 (Android 9) with radare2 (v3.6.0 linux-arm32). When i attach to a process with 'r2 -d pid' the app freezes properly but doesn't continue with 'dc'. I'm not sure ...
1
vote
0answers
57 views

How to find implementation of native method in the library .so (Android)

I need to make reverse engineering of one android app. In this app I found class with name Im2MessageNative, this class contains a lot of native methods. For example: static native long ...
5
votes
4answers
167 views

What information may supply the uninitialized data to security team?

When I was reversing some well known Android chat applications (I can not disclose which specific ones, but all of them where owned by companies with 1 billion+ capital and have hundreds of millions ...
2
votes
1answer
304 views

Where is Android binary XML format documented?

This format is always trouble for reverse engeneering. When there are question about binary XML, the usual answer is "use apktool" (or something similar). However, no tool is perfect; actually all ...
1
vote
1answer
50 views

DEX file referenced type is not defined in file

I am analyzing a dex file and to ease with reverse engineering, I converted it a jar so it could be decompiled. In the file android/support/v17/leanback/media/MediaControllerGlue.class, the following ...
0
votes
1answer
3k views

Decrypting Lua Files

I am trying to decrypt a lua file which has been encrypting using a key. Some background to the LUA file. Its from an android Game i decompiled the APK and found that all the lua files are encrypted. ...
2
votes
2answers
114 views

Firestick get application binary

I would like to reverse engineer and ultimately patch an application on my Amazon Firestick. To doo this, I want to analyze the app executable. I believe third-party apk's are stored in the /data ...
1
vote
0answers
1k views

Obfuscated Config Files: EHI Files for HTTP Injector

So I have an ehi file, which is a configuration file for an Android App called HTTP Injector. Of course when I try to see it as a simple text, I just get random characters. What tool could I use to ...
0
votes
1answer
143 views

IDA taking forever to run autoanalysis on remote Android app?

I've disassembled and run auto-analysis on a .so file from an Android apk, and then hooked up the remote ARM debugger to an emulator. IDA then asked me if /data/app/com.package.name/lib/arm/libil2cpp....
1
vote
0answers
69 views

Downgrade HTTPS (strip SSL ) to HTTP on Windows (if possible) [closed]

Long Question: I have an Android app: https://transfer.sh/mY240/com.phonegap.voyo.apk which connects to an API: http://www.24ur.com/lbin/WebApp/Popplus/Android.php the problem is the api authors are ...
0
votes
0answers
48 views

When i try to modify an app it gives an error

I am trying to modify an android app but when I modify the .dex files and install it it gives an error that this app is not genuine So how can I delete the code that is protecting the app from being ...
3
votes
0answers
330 views

Android APK debugging: modify value of smali register

I am debugging an apk app that I do not have the sources for. I want to debug it on a smali level, not decompiled. I used to do this with apktool, but looking at their website, smali-debugging is ...
1
vote
0answers
85 views

Reverse Engineering Android ROMS to detect malicious code

I'm working on reverse Engineering Android ROMS (Firmware you can flash onto your phone) so that I can scan them for malicious behavior. I've been looking all over the internet but unfortunately I'm ...
0
votes
0answers
267 views

Modifying apk at java bytecode level

After days of searching, i found that modifying an APK at Dalvik bytecode level is guaranteed to work, resulting in a new valid APK (steps explained here). I've already modified some malwares using ...

1
2 3 4 5 6