Questions tagged [android]
Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.
391
questions
4
votes
5
answers
22k
views
print [B byte array in frida js script
I'm learning frida and trying to hook a function that looks like:
`.method public final fn()[B`
It returns a byte array. Here's my code:
Java.perform(function () {
var test = Java.use("com...");...
- 101
0
votes
0
answers
11
views
Failed to attach: unable to connect to remote frida-server: closed
I'm trying to bypass Frida (Android) local port scanning detection, so I followed this guide. The sequence of commands I used are : (magic_man is alias for frida_server)
adb root
adb push magic_man /...
- 101
0
votes
0
answers
32
views
Recognize API calls of an APK
I have an Apk file for an app that functions as an AI image generator. I want to identify the specific API call responsible for the AI image generation.
How can I do it?
- 101
1
vote
0
answers
42
views
How does Play integrity api assures Genuine app binary
I discovered that we can use the Play integrity api instead of safetynet now to assure the integrity off an app that is running. I am wondering if people have a way of bypassing the "Genuine app ...
- 11
0
votes
0
answers
31
views
decode lua files cocos2dx and protected from Frida and IDA64 for hooking
I want to decode the lua and other resources files. But i cant find the key when i use frida or ida 64 it crash before the game start.
Game is here https://megamonglobal.com/
https://imgur.com/88Habwu
- 53
1
vote
0
answers
42
views
Frida: how to hook a synthetic class
When reverse engineering an APK I came across a class that was marked synthetic.
I have used JADX decompiler. The simplified result I got was:
package com;
public final class zz6 extends B implements ...
4
votes
1
answer
2k
views
Reverse engineering a flutter built apk
I was trying to reverse engineer an apk built with flutter. I actually feel like reversing flutter built apps did not get much reverse writeups on the community. one of the tools for the task ...
CommunityBot
- 1
0
votes
1
answer
67
views
Reverse Android native lib
I am wondering how to reverse Android native lib. Its covered with ollvm so the code is awful and I can't understand anything
I can use Frida but not Frida stalker (got kicked every time trying to ...
CommunityBot
- 1
2
votes
2
answers
339
views
Capturing ADB commands sent by a Windows program to a phone
I would like to see, what ADB commands a Windows program is sending to my Android phone, to see how its functions operate.
- 13
92
votes
9
answers
304k
views
How do I reverse-engineer .so files found in Android APKs?
I know how to reverse-engineer normal Android APKs using tools like apktool and dex2jar, but I don't know how to work with obfuscation.
When I extract everything from APK, I get some Smali files (I ...
- 115
0
votes
1
answer
65
views
IDA Pro: JDWP error: ABSENT_INFORMATION - Desired information is not available
I am trying to debug a dex file from an APK file in IDA Pro. I set some breakpoints when launching the activity. When I start the process, the application waits for the debugger. After some time, IDA ...
- 115
0
votes
1
answer
299
views
How do I gain access to files that an Android app stores in its persistent internal storage directory?
I was playing a game that had hidden achievements and wanted to find the conditions necessary to unlock these achievements. To do this, I've tried to get the source code of the game, to find the ...
CommunityBot
- 1
1
vote
1
answer
277
views
How to decode lua files and resource files that are protected from Frida and IDA64?
I am trying to decrypt Lua files from an Android game "The Sea Road: Fate Assembly" (APK download link). It uses Cocos2d-x, but it's encrypted, maybe with AES encryption.
With Frida, the ...
3
votes
1
answer
286
views
Compress Xamarin assemblies after decompression
I have an APK that has assemblies in a single blob file. I could extract them successfully using decompress-assemblies.
Is there anyway I can compress them again into assemblies.blob file or at least ...
CommunityBot
- 1
2
votes
1
answer
640
views
Whether samples downloaded from virus share can execute automatically in my computer
I am doing some android malware analysis work and downloaded many android samples in virus share, but I found some of them are windows malware e.g. labeled 'win32' or something.
Are these windows ...
CommunityBot
- 1
0
votes
1
answer
187
views
decomplied apk with bad parameters
I'm trying to reverse engineering an android app API so this is what I tried:
First the app was using Okhttp certificate pinning and I couldn't track the URLs with Charles then I tried this method ...
CommunityBot
- 1
2
votes
1
answer
357
views
$$Lambda$(number) when decompiled Java bytecode
Why when I decompile a Java bytecode (which further was decompiled from .dex), I get $$Lambda$(number), in Java files, and it's not possible to build project with these java codes as it's insufficient ...
CommunityBot
- 1
0
votes
1
answer
158
views
How learn which functions are called in .so library at Android?
I want to learn how listen certain .so files. I mean what is the way to know which fuctions are called which body of code executed in shared library at Android? I just wanted mofify stock camera on my ...
CommunityBot
- 1
1
vote
1
answer
242
views
possible to modify apk to bypass api request/response?
I have an apk for an app that contacts a web API that no longer exists. I do not have the source code. The app will not work normally without getting a response from the API.
Something like this:
...
- 917
1
vote
0
answers
177
views
Read value from frida hooked native method Jlong parameter
I am new to using frida for hooking native android code i.e lib.so, so I have load the lib into ghidra and can find the native function. the native function is getting 5 params including jnienv and ...
- 309
0
votes
0
answers
178
views
How does the Easy Victory cheat get data from another app in real time?
Easy Victory was developed in Java for Android
I was very curious about how Easy Victory takes data from the game's balls and billiard cue force/velocity to calculate trajectories
This is not a mod ...
0
votes
0
answers
99
views
How can I find which JNI library implements a java native method at runtime for Android applications?
I am doing security research, my target application includes some JNI libraries which implements some native java methods I am interested in. This app is obfuscated, I can't directly find the library ...
- 101
2
votes
0
answers
145
views
APK / Decrypting [closed]
I'm new to Reverse Engineering, so I apologize if something is wrong.
There is a free program that requires a license key, which can no longer be bought and obtained. I'm trying to write a KeyGen or ...
- 257
1
vote
0
answers
31
views
I Want to Edit lk partition to support fastboot binaries
based on what i found Oppo removed the fastboot binaries from my phone (Oppo A5s) and since the lk partition is the one that have it by default i would like to know how can i sort of inject the ...
- 11
1
vote
2
answers
976
views
Decompiling and Recompiling APK leads to crash using Apktool
Decompiling and recompiling an apk causes it to crash. My goal is simply to insert a method into smali code that prints a stacktrace, but even decompiling and recompiling with no changes causes the ...
1
vote
0
answers
39
views
JEB pro is not showing xrefs for native code (arm)
i have this problem when analyzing arm shared object.
when working with IDA pro, it finds all xrefs but in jeb, most of xrefs are missing.
when JEB finfishes, the final analysis lacks most of xrefs. I ...
- 51
1
vote
0
answers
286
views
Reverse Engineering Android ROMS to detect malicious code
I'm working on reverse Engineering Android ROMS (Firmware you can flash onto your phone) so that I can scan them for malicious behavior. I've been looking all over the internet but unfortunately I'm ...
3
votes
0
answers
131
views
What is the best emulator/environment for android debugging?
I know the question smells like I want a ready solution but I have been trying many things and after a lot of headaches, still I can't do what I want.
There are fast emulators but they don't provide ...
- 459
2
votes
0
answers
64
views
Need help extracting AP_Pack .obb files
I'm trying to extract the files for the series of 4 games - Sorcery!, which are in the format .obb.
Thanks to a Hex editor I saw that the .obb was an AP_Pack, and looking for more information on the ...
- 257
1
vote
0
answers
420
views
Bypass SSL pinning for android application
I am trying to analyze the network traffic from an android application for research purpose. I tried few approaches but unable to achieve the results. I am using rooted android emulator.
I tried to ...
2
votes
1
answer
209
views
App from playstore runs but the same apk crashes on sideload install
On my nougat device, I have downloaded an app from the playstore, which is running great. I then extracted the apk from the installed app, and uninstalled it and again successfully, with the package ...
- 1,797
2
votes
0
answers
53
views
Difference between __openat and openat (Android)
While reverse engineering an Android process, I wanted to explore the openat function. I noticed that there is a symbol "openat" and another symbol "__openat". What is the ...
- 193
2
votes
2
answers
257
views
Load Library Android
I work as cybersecurity consultant, and now I am on mission to reverse engineering of mobile app.
I always reverse it using Jadx and dex2jar... the problem that after reverse them I found some native ...
CommunityBot
- 1
2
votes
1
answer
462
views
Frida not hook functions
I want to hook a xxtea_decrypt
but it not trigger and on other games it trigger but some games not trigger it.
On ida pro its trigger the xxtea_decrypt but frida nope
here is the code that i using it
...
- 917
4
votes
0
answers
218
views
How to trace with Frida some specific functions in ARM ending with BX LR
I'am trying to trace down with Frida v16.0.11 (frida-trace) all calls to exported functions from "libssl.so" (Android, 32bit). But turns out that Frida is unable to hook some functions. One ...
- 41
4
votes
0
answers
55
views
How to edite a compiled Reactive Native file "main.bundle"
I bought I vacuum robot from Dreame and needed to replace the Lidar sensor myself as in my country (Brazil) don't have technical assistance, but now it is not working properly because it says that don'...
- 41
1
vote
1
answer
419
views
HELP Decrypting Lua files
i'm trying to mod a game named : DDTank Mobile, which is on both Android & IOS.
This game runs on cocos2d engine, the thing is the lua files are encrypted.
I read somewhere to look for 'sign' at ...
CommunityBot
- 1
3
votes
0
answers
207
views
How do i set these tricky boolean values to true in Smali-Dalvik?
These would allow me to make the input text field clickable and editable but the thing is how to do this.
Instance field
.field private g:Z
1 -
invoke-virtual {p1, p2, v0}, Landroid/content/res/...
- 31
3
votes
0
answers
49
views
How do I make a text field editable when the app is designed to autofill OTP SMS?
Hello fellow rev engineers,
I'm running an app in an emulator and the problem is that for registration it must autofill the OTP sent by SMS, the text field isn't editable/clickable and I can't advance ...
- 31
3
votes
1
answer
3k
views
Is is possible to get versioncode and version number of an app in Google Play?
I want to get version code and version number of an app via API from Google Play, but some apps don't have it via google play website. You have to enter via Google Play app and then you can get ...
- 917
2
votes
0
answers
246
views
How to encode file lua and resource files
I am trying to decrypt luas files it use cocos2dx but its encrypted maybe aes encryption.
With frida i can extract most lua files but not all.
And with ida64 i cant find the key.
- 53
7
votes
2
answers
1k
views
Attach Shared Object to android process with IDA
I am:
working with an Android game,
using an Android Emulator,
and trying to attach an android .so library to a process.
I have the whole IDA server set up, I can attach to processes when a classes....
CommunityBot
- 1
2
votes
1
answer
73
views
How do you identify a software framework?
I downloaded a free app but I want to stop it from showing ads.
https://www.statista.com/statistics/869224/worldwide-software-developer-working-hours/
Apparently it's almost certainly in one of the ...
- 917
1
vote
1
answer
6k
views
how to change app name and package name of an apk?
I decompiled an apk and I made a couple of modifications. When I tried to recompile it I got that error :
Compiling APK file...
/c "java -Xmx1024m -jar "C:\Program Files (x86)\APK Easy Tool\...
CommunityBot
- 1
2
votes
0
answers
83
views
Android game reverse http request body
I'm trying to reverse request that are made to an android game to learn more about how it works.
I was able to find endpoints requests that are made with frida and mitmproxy but now I'm stuck because ...
4
votes
2
answers
1k
views
How to encode file
I am trying to decrypt a lua file which has been encrypting using a key. Some background to the lua file. Its from an android I decompiled the APK and found that all the lua files are encrypted.
- 10.9k
2
votes
2
answers
2k
views
Decode lua scripts for cocos2d based game / frida, android
I'm trying to decrypt LUA scripts from cocos2dx game (for wiki).
In most cases, it's XXTEA based, but not in this case.
The game itself:
https://apkpure.com/might-magic-era-of-chaos/com.ubisoft.might....
- 111
2
votes
0
answers
33
views
How to re-create media file from android sender output stream
I would like to perform dynamic analysis on some android apps to check if these apps sending metadata with media files or not.
Ideas like the picture below:
Step 1: I prepared an image with metadata (...
- 121
3
votes
0
answers
328
views
Flashed "compatible" firmware onto two generic Allwinner A50 tablets
I'm already at least 3 days on this and can't find a way out. I'm still unsure if it fits here, but here we go!
I have 3 A50 Allwinner tablets (HOW HT-705XT) that I wanted to root. Since the only way ...
- 51
2
votes
0
answers
358
views
Cannot load libvulkan.so on Linux chroot running on Android while normal Android apps can load it
Environment
First I will give a quick summary of my environment
Device: Samsung Galaxy M20 (m20lte)
SoC: Exynos 7904 (with Mali-G71 GPU)
OS: Android 10 (Stock ROM with root using Magisk)
Kernel: 4.4....
- 249