Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Filter by
Sorted by
Tagged with
-1
votes
0answers
20 views

How the SHA fingerprints can be extracted from an APK file and how can it be prevented in Android Studio?

Reverse engineering an APK file reveals sensitive information (including the source code). But can it also reveal the SHA fingerprints? If yes, then how to prevent its extraction in Android Studio?
0
votes
0answers
64 views

Is this native code possible for further static analysis?

I was trying to reverse engineer a native lib code in an android app. the .so contains many functions. But the function sUQWWyTBEs() was referred in the Java code. I was curious how this function ...
-1
votes
1answer
97 views

what do these assembly code doing?

I tried to reverse engineer an apk app, and it was loading a native code. I have observed that the app was using the native code like this public static String v = sUQWWyTBEs().toString().substring(32,...
2
votes
1answer
76 views

How to extract the kernel assembly code from a zImage?

here is the situation, i have a OnePlus phone and i want to explore his kernel, so i downloaded the zip firmware from the oneplus website, extract the img files from the payload.bin, use this tool to ...
2
votes
0answers
35 views

Cant hook into native lib with script?

im doing some practice stuff about hooking android native lib. I wrote this script: function processJniOnLoad(libraryName) { const funcSym = "...
1
vote
1answer
296 views

Decode lua scripts for cocos2d based game / frida, android

I'm trying to decrypt LUA scripts from cocos2dx game (for wiki). In most cases, it's XXTEA based, but not in this case. The game itself: https://apkpure.com/might-magic-era-of-chaos/com.ubisoft.might....
0
votes
0answers
24 views

Decoding serialization of raw data

I'm trying to decode some IR data. I have some basic information about this data, but I don't know how to decode it. Though this is technically an IR/Android related problem, I think I can generify it ...
0
votes
1answer
49 views

Any ways to combine Android APK with Expansion pack file?

I want to have only one APK that contains all files and resources without having to download expansion pack every time. Is there any way to combine Android APK with Expansion pack file? My expansion ...
0
votes
1answer
280 views

How to Modify CBZ Branch in ARM64?

If I want after running the CBZ W0, loc_C5C8 command Run to the ADRP X8,#selRef_curent_version@PAGE command regardless of the condition (in picture), what should I do?
6
votes
1answer
2k views

IDA Pro 6.4 android_server processattach failed

I would like to ask if anyone knows how to solve the above mentioned problem I encounter. I was reverse engineering an apk, and met a part where static analysis with IDA Pro is not enough, so I ...
1
vote
1answer
48 views

Remote debugging android native lib(.so) No connection could be made because the target machine actively refused it. when connecting to

I have a running IDA debug-server on my virtual android device(check attachments). The problem is: when I try hit Attach procces it gives me an error(check title). Here is some kinda params that I'm ...
3
votes
1answer
92 views

DEX file referenced type is not defined in file

I am analyzing a dex file and to ease with reverse engineering, I converted it a jar so it could be decompiled. In the file android/support/v17/leanback/media/MediaControllerGlue.class, the following ...
1
vote
1answer
676 views

IDA taking forever to run autoanalysis on remote Android app?

I've disassembled and run auto-analysis on a .so file from an Android apk, and then hooked up the remote ARM debugger to an emulator. IDA then asked me if /data/app/com.package.name/lib/arm/libil2cpp....
1
vote
0answers
23 views

How to repack the monobundleapp

I recently had to make a version of a survivalcraft 2 mod that allowed circuits to run faster I found this script by stack overflow to unpack a mono bundle app I already modified the .dll, but I need ...
2
votes
0answers
63 views

reversing a grpc call

im reversing a android app and i managed to intercept a grpc request and decode it using protoc but i cant seem to make sense of any of the data, i know its compressed using gzip because of the ...
0
votes
1answer
50 views

$$Lambda$(number) when decompiled java bytecode

why when i decompile java bytecode (which further was decompiled from .dex), i get $$Lambda$(number), in java files, and it's not possible to build project with these java codes as it's insufficient ...
1
vote
1answer
32 views

analyze how data is read in android usb device

I've a huawei envizion 360, which doesn't provide any API for other application. But I want to read raw data from this device, to an android or to a raspberry-pi for debugging and development purpose. ...
4
votes
1answer
854 views

Attach Shared Object to android process with IDA

I am: working with an Android game, using an Android Emulator, and trying to attach an android .so library to a process. I have the whole IDA server set up, I can attach to processes when a classes....
0
votes
0answers
243 views

How to decompile a unity apk to a project?

I have tried to decompile a variety of APK's built with unity, but the tools i have used (uTinyRipper, iLSpy, some others) give me some files which give me errors and incomplete code/assets. I see ...
2
votes
4answers
752 views

Endoscope Camera YPC99 - how to stream on linux

I'm trying to stream video from endoscope camera YPC99 on linux PC using the WiFi connection. From what I have found so far the camera is using IP 192.168.1.1. It supports RTSP protocol on port 7070 (...
1
vote
1answer
199 views

Proper way of implementing DexGuard RASP device checks

I recently came across an app that is protected with DexGuard. DexGuard claims to offer Runtime Application Self Protection (RASP), which comprises of app obfuscation and various runtime tampering ...
0
votes
0answers
55 views

SSL pinning deep problem

I'm working on one Android app for potential malware analysis and I am trying to MITM it. I found out that the verify function never executes (X509 class) when i hook onto my proxy but rather that app ...
0
votes
0answers
14 views

How to remove prevent screenshot in React native?

I tried patching the dex of an Android app but it seems like native code is looking for the module? Does this require arm code patching?
0
votes
1answer
414 views

how to change app name and package name of an apk?

I decompiled an apk and I made a couple of modifications. When I tried to recompile it I got that error : Compiling APK file... /c "java -Xmx1024m -jar "C:\Program Files (x86)\APK Easy Tool\...
0
votes
0answers
21 views

How do I correctly change the version of Soccer Stars app while modifying the apk?

I am new to the modding of android apps, and was trying an experiment with a game called Soccer Stars. Soccer stars apparently has a different game server for every new version of the game. At the ...
1
vote
1answer
109 views

How to read dnSpy code from assembly_csharp.dll

So I have managed to retrieve the assembly_csharp.dll using the il2cpp tool from an android apk, however my issue is that when I go to read the dll using dnSpy I have all the correct looking function ...
1
vote
1answer
172 views

Is is possible to get versioncode and version number of an app in Google Play?

I want to get version code and version number of an app via API from Google Play, but some apps don't have it via google play website. You have to enter via Google Play app and then you can get ...
0
votes
1answer
55 views

Java Help Understanding RSA Encrypt/Decrypt file and SD card

I was directed tyhis way from the main superuser site: I have zero experience with Java or Android apps (have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
0
votes
2answers
95 views

Load Library Android

I Work as cybersecurity consultant and now i'am in mission to reverse engineering of mobile app. I always reverse it using Jadx and dex2jar ... the problem that after reverse them i found some native ...
2
votes
0answers
296 views

Hooking an interface method with Frida in an Android application

I'm trying to understand what an android application is sending over the network and as such am trying to hook into it with Frida, specifically a method called storeKeys . I was able to perform the ...
0
votes
0answers
25 views

Detect which type of SSL Pinning is being used on Android Applications

Is there a way to detect what the Android Application is using as SSL Pinning. Whether it is certificate Pinning , Public Key Pinning or Hash Pinning ? I am doing a study on local Android Applications ...
0
votes
1answer
164 views

Debug 3rd-party apk with .so-files missing debug symbols

Apologies, if this has been asked before. I am reverse engineering a chinese app that connects to a BLE device, so I can inspect how it transmits the data. Using this official guide I decompiled my ...
0
votes
1answer
72 views

finding rest api urls after decompiling apk

i have two apk files , when i decompile them using apktool i can take a look at decompile code , so here is what really confuse me , in the first apk if i searched the hole files for strings witch ...
3
votes
1answer
425 views

Reverse engineering android native packer

im trying to Reverse engineering an android app and the app have 4 folders in the /data/data/{package} folder ├───app_dexprotector │ 823517D25836B88F1C499C02370A047E.dat │ ...
0
votes
1answer
64 views

Making a Android Toast via JNI, i.e. calling Java methods via JNI

Concerning the outputting of an Toast, I found that there are some ways to make a Toast, that invoke calling a FindClass on JNIEnv object with the android/widget/Toast parameter, but I found no ...
-1
votes
3answers
893 views

Proxy debugging tool doesn't capture traffic from some online games

I'm analyzing Android games with Fiddler 2 to see how the game collects data. There is a problem, both Fiddler 2 and Charles Proxy doesn't capture any traffic from some online games. All i got are ads ...
2
votes
1answer
249 views

IDA Pro: How to change segment register value

For a specific Android library that I have loaded into IDA, I want to switch the THUMB/ARM mode to ARM, no matter the consequences that this is going to have to the code. Is there a way to efficiently ...
0
votes
0answers
85 views

Android app Viber (com.viber.voip) mitm

I want to see what viber is sending out of my android phone, I'm using mitm proxy (custom server) but the app is using certificate pining to detect the proxy and close the connection after the ...
1
vote
1answer
70 views

How to read data from android.car.cluster

While performing a vulnerability scan for open ports of an Android Automotive Infotainment system, I found out that port 5151 is open. Doing a netcat on the open port, reveals a continuous stream of ...
0
votes
1answer
441 views

LOG Urls that APK requests using smali

I have an APK that uses pinning. I am having an unbelievable time trying to remove the SSL pinning so i figure it might be easier to modify the smali files and recompile to log the LoadURL events. ...
0
votes
0answers
49 views

How to recreate project in android studio after deobfuscation and modifying source code?

I managed to deobfuscated the apk Now i have modified some of the source code using Jadx-gui and exporting the project as gradle build Now when i build the project to run the app in my android ...
0
votes
0answers
52 views

Android app leaking data

While going through the app analysis i found that when i use logcat it shows me encrypted data ..now the app is obfuscated ... When i use burp suite with my android emulator it was making a POST ...
1
vote
0answers
474 views

Static binary instrumentation tools for android .so libraries?

I'm trying to statically inject code into an android app. The best way would be to use APKStudio and the like, but there are very harsh restrictions on the device and the app itself, so that apk ...
3
votes
2answers
148 views

Frida reading files is slow

I need to read a file around 2 MB into a byte array. var fis = Java.use("java.io.FileInputStream"); var file = fis.$new("/data/local/file.txt"); var fileBytes = new Uint8Array(file....
14
votes
1answer
23k views

Debugging third party android APKs

What are some ways to debug third party android apps (apps you don't have the source code to)? I would like to step through the APK instruction by instruction, and possibly set breakpoints on certain ...
0
votes
0answers
208 views

Tracing all (or most of) function calls in a specific Android app

I'm having a problem, where I'm trying to trace some function calls in an Android app, that uses JNI for about all of its work. More specifically, a function call, in JNI, that makes (IIRC Android ...
5
votes
3answers
8k views

Use Android Shared library (.so) files in Linux

I decompiled an APK file,and that program have native codes in a .so file. I want to use that .so file in Linux in order to use inline functions. These codes have functions to connect to a server and ...
0
votes
0answers
50 views

App crashes upon launch after apktool d, apktool b without changing anything

I would like to modify some codes via apktool. However it crashes once I signed it and installed it. I have tried resigned it without using apktool. It works. So I am pretty sure that the app does ...
1
vote
1answer
77 views

How can I see when a library is being called in Android?

Apologies for a beginner-esque question, but I am reverse engineering an Android application, that is most probably using the libusbhost.so library to interface with USB devices via Java Native ...
1
vote
0answers
825 views

Unpack, modify and rebuild an Android App Bundles (.aab) file

I would like to unpack an .aab file, decompile/recompile the classes.dex (baksmali/smali), edit the manifest and, finally, generate a new .aab file. Basically, I am looking for an apktool for .aab

1
2 3 4 5
7