Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Filter by
Sorted by
Tagged with
2 votes
0 answers
69 views

How to decompile an APK written in Golang?

I recently started trying to learn basic reverse engineering and Golang. Decompiling Android apps written in C++ and Java/Kotlin seems easy as there are tons of documents and tools that enable you to ...
2 votes
1 answer
732 views

Decrypting Lua files encrypt from apk game

I am trying to decrypt a lua file which has been encrypting using a key. Some background to the lua file. Its from an android game I decompiled the APK and found that all the lua files are encrypted. ...
6 votes
2 answers
1k views

Attach Shared Object to android process with IDA

I am: working with an Android game, using an Android Emulator, and trying to attach an android .so library to a process. I have the whole IDA server set up, I can attach to processes when a classes....
3 votes
1 answer
652 views

Can I find usages of this string in my .so file? ARM

My apologies if this question is very basic. I have found this string in my Android application Binary that was built using the flutter framework. This is a 32 bit ARM library. I found the location of ...
2 votes
0 answers
36 views

Next steps for android native library RE (JNI_OnLoad, root check)

I'm trying to RE an Android app that detects root on a system. Using frida to backtrace 'access' calls I found out that the root check happens natively: access(/system/xbin/su, 0x0) Interceptor ...
1 vote
1 answer
4k views

how to change app name and package name of an apk?

I decompiled an apk and I made a couple of modifications. When I tried to recompile it I got that error : Compiling APK file... /c "java -Xmx1024m -jar "C:\Program Files (x86)\APK Easy Tool\...
1 vote
0 answers
35 views

Reverse engineering of Process manager apk

Is there someone helps me to understand how to build the server of this apk https://lab52.io/blog/complete-dissection-of-an-apk-with-a-suspicious-c2-server/ ? I tried to disassemble the apk but it is ...
0 votes
1 answer
93 views

Malware application in Android

Is there some website that give us the possibility to download malware APK in order to study it? I’m interested to study the abuse of android.permission.RECORD_AUDIO in Android 8.
0 votes
0 answers
35 views

Malware apk in Android [duplicate]

Is there some website where i'm able to find malware apk filtering by permission (for instance: RECORD_AUDIO)? I'm looking for website similar to pithus
1 vote
0 answers
55 views

Decompiling and Recompiling APK leads to crash using Apktool

Decompiling and recompiling an apk causes it to crash. My goal is simply to insert a method into smali code that prints a stacktrace, but even decompiling and recompiling with no changes causes the ...
1 vote
0 answers
54 views

SSL Pinning React Native

I'm trying to remove SSL pinning with Android device. I've tried different techniques like hooking the app with Objection, re-pinning with Frida, using the SSLUnpinning app from the Xposed repo, etc. ...
user avatar
1 vote
0 answers
114 views

frida cant cast string array to java.lang.object

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); the last parameter is a string list casted to java.lang.object the way ...
1 vote
0 answers
12 views

Need help injecting SSID into Momentum app checking for device wifi

Hello so I'm trying to add a device onto my Genymotion emulated device but to add it the app needs to detect the AP. this is the logcat of just the apps logs If anyone can help let me know im trying ...
1 vote
0 answers
817 views

Tracing all (or most of) function calls in a specific Android app

I'm having a problem, where I'm trying to trace some function calls in an Android app, that uses JNI for about all of its work. More specifically, a function call, in JNI, that makes (IIRC Android ...
0 votes
0 answers
148 views

frida calling method raises error pointer expected

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); whenever i try to call it and pass the needed arguments it raises a ...
0 votes
1 answer
95 views

How do I gain access to files that an Android app stores in its persistent internal storage directory?

I was playing a game that had hidden achievements and wanted to find the conditions necessary to unlock these achievements. To do this, I've tried to get the source code of the game, to find the ...
0 votes
0 answers
39 views

Where can I find the hashing algorithm in source code?

When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following email & pass : "abc@abbc.com:abc" it ...
0 votes
1 answer
314 views

frida returning wrong overload of android method

im trying to hook the C6494a method has 2 parameters the ge6 object and a activity object whenever i try to hook this method with a hook overload that contains both ge6 and the activity object frida ...
0 votes
1 answer
228 views

ghidra returning wrong function address

I am reverse engineering a android app shared library (.so file) and I am trying to use frida to hook a non exported native function I am using this hook const ghidraImageBase = 0x00100000; const ...
1 vote
1 answer
76 views

How to set a breakpoint in android's openssl library in running android application?

I'm debugging an obfuscated android application. I use Android Studio's debugger. I attach it remotely to my physical device via adb. I can set a breakpoint in the app smali code, but when I try to ...
0 votes
0 answers
23 views

What skills are need to find ways of take root of Phones?

I am very interested in about take root of Android phones and I'm noob of reverse engineering. I have some of old Android devices that already unused. Some Android devices provide easier path to root ...
6 votes
2 answers
2k views

IDA Pro 6.4 android_server processattach failed

I would like to ask if anyone knows how to solve the above mentioned problem I encounter. I was reverse engineering an apk, and met a part where static analysis with IDA Pro is not enough, so I ...
0 votes
2 answers
190 views

Load Library Android

I work as cybersecurity consultant, and now I am on mission to reverse engineering of mobile app. I always reverse it using Jadx and dex2jar... the problem that after reverse them I found some native ...
2 votes
1 answer
993 views

Debug 3rd-party apk with .so-files missing debug symbols

Apologies, if this has been asked before. I am reverse engineering a chinese app that connects to a BLE device, so I can inspect how it transmits the data. Using this official guide I decompiled my ...
1 vote
1 answer
188 views

$$Lambda$(number) when decompiled Java bytecode

Why when I decompile a Java bytecode (which further was decompiled from .dex), I get $$Lambda$(number), in Java files, and it's not possible to build project with these java codes as it's insufficient ...
0 votes
1 answer
833 views

How to Modify CBZ Branch in ARM64?

If I want after running the CBZ W0, loc_C5C8 command Run to the ADRP X8,#selRef_curent_version@PAGE command regardless of the condition (in picture), what should I do?
0 votes
0 answers
29 views

Is there any Android application that can manipulate the http response?

Is there any android app to manipulate http response body without vpn? for example: from "0|{random_string}|Wrong" Becomes "1|{random_string}|True" Thanks in advance
0 votes
1 answer
179 views

Java Help Understanding RSA Encrypt/Decrypt file and SD card

I was directed this way from the main superuser site: I have zero experience with Java or Android apps (I have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
0 votes
1 answer
81 views

Reverse engineering ELF: The e_phentsize field in the ELF header is less than the size of an ELF program header

I have extracted the .so binary libTheArmKing.so (located in lib directory in apk file) from a hack of World War Heroes game (an Android game) from Plantimod Forum. file output: libTheArmKing.so: ELF ...
0 votes
0 answers
16 views

IDA debug function spawned by pthread_once

I am using IDA to debug android, some libs use pthread_once/pthread_create function to call a function. How do I use/set up IDA to debug the function passed to pthread_once ?
1 vote
2 answers
1k views

Decode lua scripts for cocos2d based game / frida, android

I'm trying to decrypt LUA scripts from cocos2dx game (for wiki). In most cases, it's XXTEA based, but not in this case. The game itself: https://apkpure.com/might-magic-era-of-chaos/com.ubisoft.might....
2 votes
0 answers
190 views

Intercept android app DNS lookup with Frida

I have been attempting to intercept when an app performs a DNS lookup using Frida. I assumed that ultimately a DNS lookup will end up in a libc call to gethostbyname or getaddrinfo but this does not ...
0 votes
2 answers
105 views

Capturing ADB commands sent by a Windows program to a phone

I would like to see, what ADB commands a Windows program is sending to my Android phone, to see how it operates it's functions.
0 votes
0 answers
70 views

Inject script into Dex-Protected app

I've seen scripts like : https://github.com/hluwa/frida-dexdump https://github.com/apkunpacker/DexDumper that can extract the Dex files but what I want is to inject into running app and identified ...
1 vote
0 answers
103 views

Where can I find the encryption algorithm for this POST request in an Android APP?

I have an Android app for which I need to mock an API call outside of that environment. I successfully killed the certificate pinning on this app with Frida in order to access the URL and more, but ...
2 votes
0 answers
398 views

Understand a function within Hermes byte code

The Android app I am looking at uses React Native with the Hermes JS Engine. This generates a index.android.bundle binary that contains Hermes JS bytecode. I was able to disassemble the binary file ...
1 vote
2 answers
359 views

Why IDA debugger on android doesn't show all threads?

My IDA Version is IDA Pro 7.5 SP2. And I'm trying to debug a .so file inside a .apk file. Here's what I've done: download a x86_64 system image android emulator from android studio install that .apk ...
1 vote
0 answers
88 views

Compress Xamarin assemblies after decompression

I have an APK that has assemblies in a single blob file. I could extract them successfully using decompress-assemblies. Is there anyway I can compress them again into assemblies.blob file or at least ...
2 votes
1 answer
322 views

LLDB debugging on android?

I currently don't have a pc. I have two rooted devices Arm64 host device with Debian rootfs and the device to be debugged which contains the lldb-server binary armv7. I am trying to remote debug my ...
1 vote
1 answer
37 views

Gdb hardware watchpoint error on android

After failing to find a solution to this I have started using Gdb and have encountered another error. Gdbfails to set hardware watchpoint when I'm remote debugging a rooted arm7-a target. It supports ...
1 vote
1 answer
351 views

Modify, unpack, and rebuild an Android App Bundles (.aab) file

My developer has not provided me the source code backup for my listed app in Google Play (his PC was stolen and all codes are gone with it). I logged on to my Play Store developer's account and found ...
0 votes
0 answers
138 views

How can i inject xamarin smali code into another apk?

I tried to make a simple foreground service android application using xamarin... then decompile and inject it into another apk...but it always crashes. here is adb logcat : 05-31 23:57:34.158 7680 ...
0 votes
0 answers
168 views

Trace java calls from a native library using frida

Im trying to trace method calls from a native library using frida I've tried jnitrace but it won't print anything Do you have any suggestion?
3 votes
1 answer
4k views

Android application fuzzing

How to do fuzzing in Android applications? Do we have any fuzzer specific to the android? Actually, I am looking for an easy way to do fuzzing while performing penetration testing of android ...
0 votes
0 answers
78 views

Encrypted properties files in asset folder of android application

I'm trying to reverse engineer an Android application. The goal is to obtain a secret from the apk. After decompiling the application, I found some interesting files in the assets directory. The files ...
1 vote
1 answer
501 views

Where can I find the encryption algorithm in source code?

When I submit a Customer Reference ID in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following CR ID : "SR-54585482" it POSTs the ...
1 vote
1 answer
78 views

No main activity when static analysis

Though mainifest.xml, I know main activity is: com.trust.rookie.MainActivity. But when I load the file in jadx, I can't see that class. Why? And how the program can run?
0 votes
0 answers
70 views

Linux-based head unit: getting access to displays without any display server?

Overview I have a 2016 Infiniti Q50, which was equipped with an infotainment system called Infiniti InTouch. It consists of two displays (upper and lower), and I have spent the past few weeks reverse ...
2 votes
1 answer
1k views

How to read dnSpy code from assembly_csharp.dll

So I have managed to retrieve the assembly_csharp.dll using the il2cpp tool from an android apk, however my issue is that when I go to read the dll using dnSpy I have all the correct looking function ...
4 votes
4 answers
18k views

print [B byte array in frida js script

I'm learning frida and trying to hook a function that looks like: `.method public final fn()[B` It returns a byte array. Here's my code: Java.perform(function () { var test = Java.use("com...");...

1
2 3 4 5
8