Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Filter by
Sorted by
Tagged with
1
vote
0answers
23 views

Why IDA debugger keep receiving SIGTRAP or SIGSEGV after set a break-point and then deactivated that break-point

Here's the problem: I set a breakpoint in IDA debugger the program stop at the breakpoint deactivated the breakpoint IDA keep receiving SIGTRAP or SIGSEGV ( program stop at breakpoint as expected ) :...
2
votes
0answers
77 views

Can I find usages of this string in my .so file? ARM

My apologies if this question is very basic. I have found this string in my Android application Binary that was built using the flutter framework. This is a 32 bit ARM library. I found the location of ...
1
vote
1answer
64 views

Why IDA debugger on android doesn't show all threads?

My IDA Version is IDA Pro 7.5 SP2. And I'm trying to debug a .so file inside a .apk file. Here's what I've done: download a x86_64 system image android emulator from android studio install that .apk ...
1
vote
0answers
25 views

How do I get adb to work on a Rockchip RK3288 based android device running Lollipop 5.1.1?

Lollipop 5.1.1 based device. OLD ES File Manager installed. (Yes, the exploitable one). I can copy to/from the device. I tried Kingo Root, Root Genius, Towel root, etc. None of those work. "...
0
votes
0answers
33 views

Checksum verification of an apk does not the same as my java program

I'm from the sysadmin side of the IT and have not much experience in programing. I have an app that lets me screen share Android apps on my car's display. Sadly there is a whitelist baked into the app,...
0
votes
0answers
78 views

Is this native code possible for further static analysis?

I was trying to reverse engineer a native lib code in an android app. the .so contains many functions. But the function sUQWWyTBEs() was referred in the Java code. I was curious how this function ...
-1
votes
1answer
101 views

what do these assembly code doing?

I tried to reverse engineer an apk app, and it was loading a native code. I have observed that the app was using the native code like this public static String v = sUQWWyTBEs().toString().substring(32,...
2
votes
0answers
38 views

Cant hook into native lib with script?

im doing some practice stuff about hooking android native lib. I wrote this script: function processJniOnLoad(libraryName) { const funcSym = "...
0
votes
0answers
25 views

Decoding serialization of raw data

I'm trying to decode some IR data. I have some basic information about this data, but I don't know how to decode it. Though this is technically an IR/Android related problem, I think I can generify it ...
1
vote
1answer
63 views

Remote debugging android native lib(.so) No connection could be made because the target machine actively refused it. when connecting to

I have a running IDA debug-server on my virtual android device(check attachments). The problem is: when I try hit Attach procces it gives me an error(check title). Here is some kinda params that I'm ...
1
vote
0answers
26 views

How to repack the monobundleapp

I recently had to make a version of a survivalcraft 2 mod that allowed circuits to run faster I found this script by stack overflow to unpack a mono bundle app I already modified the .dll, but I need ...
1
vote
1answer
38 views

analyze how data is read in android usb device

I've a huawei envizion 360, which doesn't provide any API for other application. But I want to read raw data from this device, to an android or to a raspberry-pi for debugging and development purpose. ...
2
votes
0answers
72 views

reversing a grpc call

im reversing a android app and i managed to intercept a grpc request and decode it using protoc but i cant seem to make sense of any of the data, i know its compressed using gzip because of the ...
2
votes
1answer
151 views

How to extract the kernel assembly code from a zImage?

here is the situation, i have a OnePlus phone and i want to explore his kernel, so i downloaded the zip firmware from the oneplus website, extract the img files from the payload.bin, use this tool to ...
0
votes
0answers
438 views

How to decompile a unity apk to a project?

I have tried to decompile a variety of APK's built with unity, but the tools i have used (uTinyRipper, iLSpy, some others) give me some files which give me errors and incomplete code/assets. I see ...
0
votes
0answers
56 views

SSL pinning deep problem

I'm working on one Android app for potential malware analysis and I am trying to MITM it. I found out that the verify function never executes (X509 class) when i hook onto my proxy but rather that app ...
0
votes
0answers
16 views

How to remove prevent screenshot in React native?

I tried patching the dex of an Android app but it seems like native code is looking for the module? Does this require arm code patching?
0
votes
0answers
21 views

How do I correctly change the version of Soccer Stars app while modifying the apk?

I am new to the modding of android apps, and was trying an experiment with a game called Soccer Stars. Soccer stars apparently has a different game server for every new version of the game. At the ...
1
vote
1answer
185 views

Is is possible to get versioncode and version number of an app in Google Play?

I want to get version code and version number of an app via API from Google Play, but some apps don't have it via google play website. You have to enter via Google Play app and then you can get ...
0
votes
1answer
53 views

$$Lambda$(number) when decompiled java bytecode

why when i decompile java bytecode (which further was decompiled from .dex), i get $$Lambda$(number), in java files, and it's not possible to build project with these java codes as it's insufficient ...
2
votes
0answers
456 views

Hooking an interface method with Frida in an Android application

I'm trying to understand what an android application is sending over the network and as such am trying to hook into it with Frida, specifically a method called storeKeys . I was able to perform the ...
0
votes
0answers
25 views

Detect which type of SSL Pinning is being used on Android Applications

Is there a way to detect what the Android Application is using as SSL Pinning. Whether it is certificate Pinning , Public Key Pinning or Hash Pinning ? I am doing a study on local Android Applications ...
0
votes
1answer
120 views

finding rest api urls after decompiling apk

i have two apk files , when i decompile them using apktool i can take a look at decompile code , so here is what really confuse me , in the first apk if i searched the hole files for strings witch ...
0
votes
1answer
69 views

Java Help Understanding RSA Encrypt/Decrypt file and SD card

I was directed tyhis way from the main superuser site: I have zero experience with Java or Android apps (have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
0
votes
1answer
651 views

how to change app name and package name of an apk?

I decompiled an apk and I made a couple of modifications. When I tried to recompile it I got that error : Compiling APK file... /c "java -Xmx1024m -jar "C:\Program Files (x86)\APK Easy Tool\...
0
votes
0answers
105 views

Android app Viber (com.viber.voip) mitm

I want to see what viber is sending out of my android phone, I'm using mitm proxy (custom server) but the app is using certificate pining to detect the proxy and close the connection after the ...
1
vote
1answer
71 views

How to read data from android.car.cluster

While performing a vulnerability scan for open ports of an Android Automotive Infotainment system, I found out that port 5151 is open. Doing a netcat on the open port, reveals a continuous stream of ...
0
votes
0answers
73 views

How to recreate project in android studio after deobfuscation and modifying source code?

I managed to deobfuscated the apk Now i have modified some of the source code using Jadx-gui and exporting the project as gradle build Now when i build the project to run the app in my android ...
0
votes
0answers
56 views

Android app leaking data

While going through the app analysis i found that when i use logcat it shows me encrypted data ..now the app is obfuscated ... When i use burp suite with my android emulator it was making a POST ...
0
votes
1answer
286 views

Debug 3rd-party apk with .so-files missing debug symbols

Apologies, if this has been asked before. I am reverse engineering a chinese app that connects to a BLE device, so I can inspect how it transmits the data. Using this official guide I decompiled my ...
3
votes
2answers
206 views

Frida reading files is slow

I need to read a file around 2 MB into a byte array. var fis = Java.use("java.io.FileInputStream"); var file = fis.$new("/data/local/file.txt"); var fileBytes = new Uint8Array(file....
2
votes
1answer
88 views

Making a Android Toast via JNI, i.e. calling Java methods via JNI

Concerning the outputting of an Toast, I found that there are some ways to make a Toast, that invoke calling a FindClass on JNIEnv object with the android/widget/Toast parameter, but I found no ...
0
votes
0answers
291 views

Tracing all (or most of) function calls in a specific Android app

I'm having a problem, where I'm trying to trace some function calls in an Android app, that uses JNI for about all of its work. More specifically, a function call, in JNI, that makes (IIRC Android ...
1
vote
1answer
157 views

How to read dnSpy code from assembly_csharp.dll

So I have managed to retrieve the assembly_csharp.dll using the il2cpp tool from an android apk, however my issue is that when I go to read the dll using dnSpy I have all the correct looking function ...
0
votes
0answers
61 views

App crashes upon launch after apktool d, apktool b without changing anything

I would like to modify some codes via apktool. However it crashes once I signed it and installed it. I have tried resigned it without using apktool. It works. So I am pretty sure that the app does ...
1
vote
1answer
79 views

How can I see when a library is being called in Android?

Apologies for a beginner-esque question, but I am reverse engineering an Android application, that is most probably using the libusbhost.so library to interface with USB devices via Java Native ...
3
votes
0answers
1k views

Unpack, modify and rebuild an Android App Bundles (.aab) file

I would like to unpack an .aab file, decompile/recompile the classes.dex (baksmali/smali), edit the manifest and, finally, generate a new .aab file. Basically, I am looking for an apktool for .aab
2
votes
1answer
97 views

apk crashed on launch when re-signed with debug key

I sometimes decompile and recompile apks and make changes (like changing graphics, text etc...) normally I use apktool to decompile and recompile and then use testsign.jar to resign the apk with the ...
1
vote
0answers
50 views

Protection of Financial Apps against repackaging

I have tried repackaging few financial apps and when I tried running their repackaged version, I found out that either it is getting crashed at the launcher activity, or at the later point it is ...
0
votes
0answers
31 views

How do I find the function that draws a window on android?

I have an application that recently disabled support for one of the features I used for legal reasons. Looking at the decompressed file size and count of the new version compared to the old version ...
0
votes
0answers
66 views

extracting png file from app

I have extracted some png files from one app. I cannot open them using android gallery neither on windows. Can you help understanding what is really this file and what should be changed in order to ...
0
votes
0answers
74 views

Android - capture screen with the lowest latency via android native code

I'm trying to catch small fragment of screen during working some Android app which I'm currently reversing. I've tried screencap with various calls but minimum latency which I was able to achieve was ...
0
votes
1answer
52 views

Understanding how a WiFi camera app goes from packet data to video stream

I have a WiFi webcam that I'm trying to get to stream to my computer. I'm able to get the camera to send data to my computer, but I don't know how to decode it. The data consists of 11 1450 byte ...
0
votes
0answers
63 views

Reverse an encryption algorithem in APK .so file

I try to reverse a cipher algorithm (I guess Tiny Encryption Algorithm (TEA)) in an android application. But I have a serious problem in initializing arguments. How I can understand that I have ...
1
vote
0answers
144 views

Is it possible to work around SQLcipher by modifying libsqlcipher.so?

I was trying to extract data from an Android app which uses SQLcipher. SQLcipher is an extension of SQLite that encrypts database files with 256-bit AES. Within the APK, the library lies in lib/...
0
votes
1answer
49 views

Any ways to combine Android APK with Expansion pack file?

I want to have only one APK that contains all files and resources without having to download expansion pack every time. Is there any way to combine Android APK with Expansion pack file? My expansion ...
1
vote
1answer
359 views

Decode lua scripts for cocos2d based game / frida, android

I'm trying to decrypt LUA scripts from cocos2dx game (for wiki). In most cases, it's XXTEA based, but not in this case. The game itself: https://apkpure.com/might-magic-era-of-chaos/com.ubisoft.might....
0
votes
0answers
79 views

capture traffic of an android app

I was trying to test and intercept traffic from an app developed on Rhodes open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can ...
0
votes
1answer
117 views

Can't CVE-2019-2215 on Android: “Unable to handle kernel paging request at virtual address”

I'm playing with Android and I'm trying to gain r/w access to the whole memory using CVE-2019-2215. Long story short, you UAF a binder_thread object and you can read from/write to kernel space. The ...
0
votes
0answers
51 views

How to get pointer's address?

I've tried to reverse engineering Clash Royale. First strange thing is that I can't find libg.so in maps. cat /proc/<pid>/maps | grep libg.so As I understand split_config.arm64_v8a.apk contains ...

1
2 3 4 5
7