Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Filter by
Sorted by
Tagged with
1 vote
0 answers
34 views

How to encode file lua and resource files

I am trying to decrypt luas files it use cocos2dx but its encrypted maybe aes encryption. With frida i can extract most lua files but not all. And with ida64 i cant find the key.
0 votes
0 answers
28 views

How do I install an .xpi file on Firefox Android?

I want to use Google's "Translate Page" function on Firefox.
2 votes
0 answers
97 views

Reverse engineering a flutter built apk

I was trying to reverse engineer an apk built with flutter. I actually feel like reversing flutter built apps did not get much reverse writeups on the community. one of the tools for the task ...
  • 219
1 vote
1 answer
52 views

How do you identify a software framework?

I downloaded a free app but I want to stop it from showing ads. https://www.statista.com/statistics/869224/worldwide-software-developer-working-hours/ Apparently it's almost certainly in one of the ...
-1 votes
0 answers
52 views

How do you edit an APK file so the app won't show ads?

I was referred here by the Android exchange. Can I just say, people really would be modding androids in the 21st century. Who'da thunk it.
2 votes
0 answers
52 views

Android game reverse http request body

I'm trying to reverse request that are made to an android game to learn more about how it works. I was able to find endpoints requests that are made with frida and mitmproxy but now I'm stuck because ...
2 votes
0 answers
29 views

How to re-create media file from android sender output stream

I would like to perform dynamic analysis on some android apps to check if these apps sending metadata with media files or not. Ideas like the picture below: Step 1: I prepared an image with metadata (...
2 votes
0 answers
63 views

Flashed "compatible" firmware onto two generic Allwinner A50 tablets

I'm already at least 3 days on this and can't find a way out. I'm still unsure if it fits here, but here we go! I have 3 A50 Allwinner tablets (HOW HT-705XT) that I wanted to root. Since the only way ...
1 vote
0 answers
49 views

Cannot load libvulkan.so on Linux chroot running on Android while normal Android apps can load it

Environment First I will give a quick summary of my environment Device: Samsung Galaxy M20 (m20lte) SoC: Exynos 7904 (with Mali-G71 GPU) OS: Android 10 (Stock ROM with root using Magisk) Kernel: 4.4....
1 vote
0 answers
86 views

I trying rewrite asm to c++ [closed]

This code generates an API key. I use it in an android app as .so file, but I need to rewrite it to java from c++. How do I translate? push rbp push r15 push r14 push r13 push r12 push ...
  • 11
1 vote
0 answers
93 views

Extract assets images from a games APK [closed]

I'm trying to remove some images from an android game, but when I try to view them in a hexadecimal viewer I see that they don't contain a PNG header, so I can't view them through the python PIL ...
  • 11
2 votes
1 answer
97 views

Frida hook X509Certificate

I have an android application. It connects to a web socket server and uses the X509Certificate to verify the connection. newBuilder.trustManagers(WebSocketClient.sTrustManagers); By using Frida I ...
  • 35
2 votes
0 answers
53 views

How do I log a string in smali without its obfuscated function?

I'm reversing engineering an app and after analyzing with man-in-the-middle, I find that it obfuscates its messages to the server so it looks like a gibberish. String stc = ("msg=" + ...
2 votes
0 answers
64 views

How can I detect which Android native function that is hooked by Mobile Substrate: MSHookFunction?

I want to detect hook behavior of MSHookFunction on Android. This is Mobile Substrate I use in my test app https://github.com/Breathleas/Android-Hooking-Template-Cydia-Substrate/tree/master/jni/...
  • 121
1 vote
0 answers
59 views

deobfuscate Dexgaurd obfuscated code

I was reversing an apk. the code detects whether the apk is running on a rooted device or not. if it is rooted or an emulator it will stop and close out. so this is the snippet code which I think it ...
  • 219
1 vote
0 answers
91 views

ghidra assigns local variable to register

im reversing a android native library and im trying to understand how a token is generated the toke n is passed to a callback java method and i traced where the method is getting called from this is ...
1 vote
1 answer
173 views

HELP Decrypting Lua files

i'm trying to mod a game named : DDTank Mobile, which is on both Android & IOS. This game runs on cocos2d engine, the thing is the lua files are encrypted. I read somewhere to look for 'sign' at ...
1 vote
0 answers
99 views

reverse engineering an APK file to find HTTP requests in the source code

I've extracted an apk(react native) with dex2jar and jar to java through jd-qui and also with apktool, and I can view the source code but there is no clue where are the HTTP requests in the source ...
2 votes
0 answers
181 views

How to decompile an APK written in Golang?

I recently started trying to learn basic reverse engineering and Golang. Decompiling Android apps written in C++ and Java/Kotlin seems easy as there are tons of documents and tools that enable you to ...
  • 21
2 votes
0 answers
95 views

Next steps for android native library RE (JNI_OnLoad, root check)

I'm trying to RE an Android app that detects root on a system. Using frida to backtrace 'access' calls I found out that the root check happens natively: access(/system/xbin/su, 0x0) Interceptor ...
  • 21
1 vote
0 answers
50 views

Reverse engineering of Process manager apk

Is there someone helps me to understand how to build the server of this apk https://lab52.io/blog/complete-dissection-of-an-apk-with-a-suspicious-c2-server/ ? I tried to disassemble the apk but it is ...
  • 27
0 votes
0 answers
35 views

Malware apk in Android [duplicate]

Is there some website where i'm able to find malware apk filtering by permission (for instance: RECORD_AUDIO)? I'm looking for website similar to pithus
  • 27
1 vote
2 answers
341 views

Decompiling and Recompiling APK leads to crash using Apktool

Decompiling and recompiling an apk causes it to crash. My goal is simply to insert a method into smali code that prints a stacktrace, but even decompiling and recompiling with no changes causes the ...
  • 121
1 vote
0 answers
384 views

frida cant cast string array to java.lang.object

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); the last parameter is a string list casted to java.lang.object the way ...
1 vote
0 answers
12 views

Need help injecting SSID into Momentum app checking for device wifi

Hello so I'm trying to add a device onto my Genymotion emulated device but to add it the app needs to detect the AP. this is the logcat of just the apps logs If anyone can help let me know im trying ...
1 vote
0 answers
137 views

SSL Pinning React Native

I'm trying to remove SSL pinning with Android device. I've tried different techniques like hooking the app with Objection, re-pinning with Frida, using the SSLUnpinning app from the Xposed repo, etc. ...
user avatar
0 votes
0 answers
395 views

frida calling method raises error pointer expected

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); whenever i try to call it and pass the needed arguments it raises a ...
0 votes
0 answers
58 views

Where can I find the hashing algorithm in source code?

When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following email & pass : "abc@abbc.com:abc" it ...
  • 1
0 votes
1 answer
104 views

Malware application in Android

Is there some website that give us the possibility to download malware APK in order to study it? I’m interested to study the abuse of android.permission.RECORD_AUDIO in Android 8.
  • 27
0 votes
0 answers
24 views

What skills are need to find ways of take root of Phones?

I am very interested in about take root of Android phones and I'm noob of reverse engineering. I have some of old Android devices that already unused. Some Android devices provide easier path to root ...
1 vote
1 answer
114 views

How to set a breakpoint in android's openssl library in running android application?

I'm debugging an obfuscated android application. I use Android Studio's debugger. I attach it remotely to my physical device via adb. I can set a breakpoint in the app smali code, but when I try to ...
  • 13
0 votes
1 answer
454 views

ghidra returning wrong function address

I am reverse engineering a android app shared library (.so file) and I am trying to use frida to hook a non exported native function I am using this hook const ghidraImageBase = 0x00100000; const ...
4 votes
2 answers
1k views

How to encode file

I am trying to decrypt a lua file which has been encrypting using a key. Some background to the lua file. Its from an android I decompiled the APK and found that all the lua files are encrypted.
  • 41
0 votes
0 answers
30 views

Is there any Android application that can manipulate the http response?

Is there any android app to manipulate http response body without vpn? for example: from "0|{random_string}|Wrong" Becomes "1|{random_string}|True" Thanks in advance
0 votes
1 answer
135 views

Reverse engineering ELF: The e_phentsize field in the ELF header is less than the size of an ELF program header

I have extracted the .so binary libTheArmKing.so (located in lib directory in apk file) from a hack of World War Heroes game (an Android game) from Plantimod Forum. file output: libTheArmKing.so: ELF ...
0 votes
0 answers
19 views

IDA debug function spawned by pthread_once

I am using IDA to debug android, some libs use pthread_once/pthread_create function to call a function. How do I use/set up IDA to debug the function passed to pthread_once ?
0 votes
1 answer
605 views

frida returning wrong overload of android method

im trying to hook the C6494a method has 2 parameters the ge6 object and a activity object whenever i try to hook this method with a hook overload that contains both ge6 and the activity object frida ...
2 votes
0 answers
301 views

Intercept android app DNS lookup with Frida

I have been attempting to intercept when an app performs a DNS lookup using Frida. I assumed that ultimately a DNS lookup will end up in a libc call to gethostbyname or getaddrinfo but this does not ...
0 votes
0 answers
117 views

Inject script into Dex-Protected app

I've seen scripts like : https://github.com/hluwa/frida-dexdump https://github.com/apkunpacker/DexDumper that can extract the Dex files but what I want is to inject into running app and identified ...
  • 257
1 vote
0 answers
167 views

Where can I find the encryption algorithm for this POST request in an Android APP?

I have an Android app for which I need to mock an API call outside of that environment. I successfully killed the certificate pinning on this app with Frida in order to access the URL and more, but ...
  • 19
2 votes
0 answers
586 views

Understand a function within Hermes byte code

The Android app I am looking at uses React Native with the Hermes JS Engine. This generates a index.android.bundle binary that contains Hermes JS bytecode. I was able to disassemble the binary file ...
1 vote
0 answers
128 views

Compress Xamarin assemblies after decompression

I have an APK that has assemblies in a single blob file. I could extract them successfully using decompress-assemblies. Is there anyway I can compress them again into assemblies.blob file or at least ...
1 vote
1 answer
71 views

Gdb hardware watchpoint error on android

After failing to find a solution to this I have started using Gdb and have encountered another error. Gdbfails to set hardware watchpoint when I'm remote debugging a rooted arm7-a target. It supports ...
  • 154
2 votes
1 answer
541 views

LLDB debugging on android?

I currently don't have a pc. I have two rooted devices Arm64 host device with Debian rootfs and the device to be debugged which contains the lldb-server binary armv7. I am trying to remote debug my ...
  • 154
1 vote
1 answer
639 views

Modify, unpack, and rebuild an Android App Bundles (.aab) file

My developer has not provided me the source code backup for my listed app in Google Play (his PC was stolen and all codes are gone with it). I logged on to my Play Store developer's account and found ...
0 votes
0 answers
168 views

How can i inject xamarin smali code into another apk?

I tried to make a simple foreground service android application using xamarin... then decompile and inject it into another apk...but it always crashes. here is adb logcat : 05-31 23:57:34.158 7680 ...
0 votes
0 answers
215 views

Trace java calls from a native library using frida

Im trying to trace method calls from a native library using frida I've tried jnitrace but it won't print anything Do you have any suggestion?
0 votes
0 answers
149 views

Encrypted properties files in asset folder of android application

I'm trying to reverse engineer an Android application. The goal is to obtain a secret from the apk. After decompiling the application, I found some interesting files in the assets directory. The files ...
1 vote
1 answer
723 views

Where can I find the encryption algorithm in source code?

When I submit a Customer Reference ID in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following CR ID : "SR-54585482" it POSTs the ...
2 votes
0 answers
773 views

Frida class constructor hook not called while there do exist instances of the class

I have an (obfuscated) app with a certain class from which I would like to hook the constructor. The class has only 1 constructor defined and so I hooked the class as follows: var Aclass = Java.use('...
  • 51

1
2 3 4 5
8