Questions tagged [android]
Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.
370
questions
1
vote
0
answers
140
views
Is there any way to get value from bytecode under JDWP without access to source?
When I debug android app through jdwp using jdb, it seems I can't get anything from the bytecode level. I know normally it's fine as long as we have the source line info and use a decompiler, but the ...
- 118
1
vote
1
answer
706
views
How to find the executable code of the native method in the library * .so? (Android)
I'm doing reverse engineering of a mobile application for android and I had a question how to find the executable code of the native method in the library * .so. From the code of the code, the native ...
- 11
2
votes
0
answers
1k
views
frida hook jni not work
I want to trace Android Telegram app(open-source) to learn its protocol.
From the source code these two functions AES_set_encrypt_key and AES_ctr128_encrypt are used to do the encryption, and I can ...
- 197
3
votes
1
answer
2k
views
Does Google encrypt APK when downloading it from Play Store?
I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log.
In ancient times Google downloaded APK directly how it is ...
- 375
0
votes
1
answer
943
views
Android Reverse Engineering Network Traffic Stack Trace
Lets say an Android application sends out a traffic out to the server and expects a Json Response
Request:
https://server:port/userid=user1&token=randomstring7345
We want to replicate the ...
4
votes
1
answer
113
views
What does a C++ identifier ending in $_## mean?
In trying to understand a .so from an Android game made with Cocos2d-x, I've come across identifiers like the following (after demangling):
SceneActionMap::updateTalkMode(float)::$_37
SceneActionMap::...
- 73
2
votes
2
answers
2k
views
How can I make sense of an Android NDK library?
So I'm currently trying to understand how an Android app interprets the data sent from a Bluetooth-enabled scale.
Understanding the Java code was relatively easy. The code was obfuscated but I found ...
- 23
-1
votes
2
answers
69
views
How to view SDK files and is it mandatory to run modified apk on rooted device
I am performing reverse engineering on android apk using apktool.
Is there any way I can view the code in SDK/NDK files ?
if i make any change in the .smali files is it necessary to run the modified ...
- 101
0
votes
1
answer
1k
views
How can I open id0, id1, nam, so, or til files?
I am attempting to reverse engineer the DYMO Connect app in order to learn how to print to a DYMO LabelWriter Wireless printer. However, the mobile driver for the printer is in several different ...
- 103
2
votes
1
answer
431
views
JAVA Decryption - Reverse engineering an Android application
I am trying to decrypt an encrypted string, but I am stuck in Ciper.doFinal() where the decryption throws a BadPaddingException.
The string in question is 3qBogw/PIqpErH/DyEHLTQ==. One thing I know is ...
- 121
1
vote
2
answers
687
views
How to reverse engineer mobile app image?
Scenario
On my phone I have an app. When I login into the app and goto my profile there is an profile picture of me. I want to that picture because I need it. Simple way is just goto an local shop an ...
- 121
16
votes
7
answers
57k
views
What are the tools use for reverse engineering android apk?
Currently, I only know about apktool.
But is there any tools that helps in checking the code, editing it and compiling it back to apk?
- 269
0
votes
2
answers
1k
views
verifyError in youtube android app modification
I try to decompile youtube android application and modify it but when I build the application and install on a virtual device faced with below error:
E/AndroidRuntime(1782): java.lang.VerifyError: ...
2
votes
0
answers
84
views
How to update reversed code of an updated application?
A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code?
I searched for ways ...
- 21
3
votes
3
answers
3k
views
Android- hiding private keys in .so file
I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
2
votes
1
answer
2k
views
Got `Source Code does not match bytecode` debug a Reversed Android app
Reverse an .apk file following This Article
Open ApkStudio, edit AndroidManifest.xml to allow debug and Build a new Apk file
Got source code with dex2jar and jd-gui
Create an project in Android ...
- 123
4
votes
4
answers
19k
views
print [B byte array in frida js script
I'm learning frida and trying to hook a function that looks like:
`.method public final fn()[B`
It returns a byte array. Here's my code:
Java.perform(function () {
var test = Java.use("com...");...
- 197
-1
votes
1
answer
561
views
Whether samples downloaded from virus share can execute automatically in my computer
I am doing some android malware analysis work and downloaded many android samples in virus share, but I found some of them are windows malware e.g. labeled 'win32' or something.
Are these windows ...
- 1
1
vote
2
answers
1k
views
IDA Pro Search classes within a Dex file inclusive of package name
Let's just assume that our classes.dex file has a class:
com.example.MyClass
in which there's a method "meth":
public final com.example.MyClass.meth(java.lang.String p0)
how/where can I search the ...
- 175
2
votes
1
answer
4k
views
Inject code into JNI function (Android shared library)
An android app loads a native library (.so) using System.loadLibrary. It then calls a specific function, which takes 3 input variables, and returns a string containing a MD5 hash.
You can see the ...
user22348
0
votes
1
answer
108
views
Android debugging, stop before app starts on third party app
I'm trying to dump a few pieces of info that happen at the very beginning of the start up of a third party app and not after the app is running. I have debugged on other platforms and there is usually ...
- 135
0
votes
1
answer
974
views
Debugging third party apk without modifying apk
I have seen the ways to modify an apk using apktools and adding android:debugging="true" but I have an apk that check for changes and crashes if any changes are made. Is it possible to capture the ...
- 135
1
vote
1
answer
671
views
JNI_onLoad not presented in .so (Android)
I'm trying to analyze a .so file that is ran on android.
Loading the file into IDA I'm unable to spot the JNI_onLoad.
So I dumped the .so to memory and I'm still unable to spot the JNI_onLoad.
...
- 231
2
votes
1
answer
634
views
Animal Crossing: Pocket Camp .zdat File
Hello I am trying to obtain the music from the new game Animal Crossing: Pocket Camp. The music is contained in files like these:
https://download-cdn-ac-pocketcamp.akamaized.net/assets/...
- 49
1
vote
0
answers
2k
views
Attaching to Dalvik static function using Frida in order to disable emulator detection
I have a re-occuring issue with Frida (I'm using Frida and Frida-Server for Android x86_64 ver.: 10.6.11), where I try to hook a function and override its functionality, but for some reason I get ...
- 11
2
votes
4
answers
3k
views
Unpacking xamarin mono dll from libmonodroid_bundle.app.so
I have an apk that was written in xamarin. The meta data suggests there are lots of dlls files this application uses. I found a file called libmonodroid_bundle_app.so which when disassembled in IDA ...
- 243
0
votes
1
answer
1k
views
charles proxy only showing portion of requests?
So i wanted to see the endpoints of this android/ios app calles "Bigo Live".
Like always, i've set up charles and started trackig.
Funnily, it only shows part of the traffic. for example: If i use ...
- 1
0
votes
1
answer
2k
views
Need help reversing an Android Game
I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
- 175
2
votes
1
answer
788
views
APK Tools for Tinder 7.4.0 [closed]
I wanted to make some Tinder tools, and found some already made APIs.
I would like go through the process of discovering this private API by myself, since most of the articles are a bit out of date.
...
- 21
0
votes
1
answer
1k
views
Security bypass: How to run application in Android Emulator?
I need to run "Yanosik" in Android Emulator Genymotion.
Developers block in app runnning it in Android Emulator - when I try download it via Playstore, it says that my device is incompatible. When I ...
- 1
1
vote
2
answers
2k
views
Opening non-standard PNG files extracted from Android app - missing signature and IHDR chunk
I am unable to open PNG files extracted from a certain Android app. I can't open them with the stock Android Gallery app. I can't open them in image browsers after downloading them on my computer. ...
2
votes
1
answer
464
views
Dolphin Emulator Android port modifications
I am modifying the Dolphin Emulator Alpha for android, but I'm having some trouble with a string in it's smali code. The value I am having trouble with is dolphin-emu, it is the name of the folder ...
- 193
1
vote
1
answer
479
views
How do I decompress a .astc file with an additional .ccz extension? How do I view .lta files?
This is crossposted from reg. stack overflow. I was referred here.
This will have more updates, however.
First, full disclosure: I'm very new to coding and very new to file dissecting, but its ...
- 11
1
vote
0
answers
353
views
Android debug server protocol version mismatch
I am trying to debug an arm64 binary in /data/local/tmp of my Android phone. I pushed the /dbgsrv/android_server64 to /data/local/tmp and then adb to the phone:
$ chmod 777 ./android_server64
$ ./...
- 11
1
vote
1
answer
132
views
Android Intercepts for log the Funtion Calls to javax
Im reversing an apk that uses a native library .so to make calls to some Java methods thru reflexion
I know by analysing the app that exist the followings calls:
import javax.crypto.Mac;
import ...
1
vote
1
answer
3k
views
How to combine 2 dex files into a single dex file for more complete disassembly by IDA Pro
Most apk files, when disassembled, produces 2 dex files instead of one. However since IDA Pro only allows the loading of one dex file at a time,it may result in missing information as a result of the ...
- 175
0
votes
1
answer
110
views
Need help understanding "garbage" data in https request
I managed to overcome certificate pinning in an android application and I am now able to view all the HTTPS request in plain text. However, I came across this request that I still do not understand:
...
- 175
3
votes
1
answer
1k
views
How to detect JNI calls from smali code?
In Android, JNI calls could be used to load native code from other sources. From the link http://bobao.360.cn/learning/detail/3765.html, the following sample code shows how a smali code would look ...
- 175
1
vote
2
answers
13k
views
Sniffing https traffic of an android app
I want to do a challenge: automise some tasks that I do in a game so I can get the max of points.
To do that, I need to know the url called and the parameters that are used in the Game. After setting ...
- 111
2
votes
3
answers
3k
views
Can apk files have protection against being debugged?
As part of a bug bounty program, I am trying to reverse engineer the bumble android mobile application via dynamic analysis. I find that if I use apktool to disassemble the apk and reassemble it again ...
- 175
0
votes
3
answers
2k
views
Is it possible to call function in dynamic link library(.so) generated by Android JNI project?
I unzipped an apk file and got one libxx.so file. I find that there are some "exported"(but I guess the "fun" function is not exported by the original programer) functions in this ...
- 1
0
votes
1
answer
914
views
Reverse engineer the update-binary file in Android recovery update packages
I am trying to understand how to disassemble or at least get a readable copy of the update-binary file located in /META-INF/com/google/android/. It is a modified version for a smartwatch, which ...
0
votes
2
answers
528
views
Smali vs Decompilation for malware detection in apk files
When it comes to reversing apk files, I understand that are mainly 2 approaches. The first involves using a decompilation engine which will try to produce java files which are more readable but can be ...
- 175
9
votes
3
answers
1k
views
Is there a name for this kind of "obfuscation" for the machine code from C++?
I was trying to reverse engineer an android ndk (arm) using ida pro on a static analysis. However, it appears there are a lot of useless jumps to the same place and with random values set to R1 to ...
- 118
1
vote
0
answers
351
views
Accessing .rodata/.rel.data.ro
Analyzing an android ELF binary. How/where does something access a specific area of .rodata or .rel.data.ro? Have tried using objdump, rabin2, readelf, etc and I can't seem to figure out how it is ...
- 11
0
votes
1
answer
140
views
Is it possible to Reverse Engineer digitially signed android game & then repack it
I am a noob in this field. I have reverse engineered an Android game to hack it but I can only install the game if it was not digitally signed.
If the game is digitally signed, I am unable to install ...
- 101
2
votes
1
answer
4k
views
How do I Log a String Referenced within a Method - Smali
I have been trying to reverse engineer an Android application and was wondering how I would go about logging a certain string. Here is the method I am trying to log the String from:
.method private ...
- 21
1
vote
0
answers
190
views
Tools to support Android native code hacking?
I am learning android reverse engineering, and want to know tools to hack native code.
gdb to remotely debug the code, but I find it can not ever hit a breakpoint.
arminject is a choice, it works on ...
- 111
2
votes
0
answers
172
views
Need help intercepting android application network traffic [closed]
On my OWN rooted phone, I have had xposed installed, justtrustme unpinning application, and tcpdump in an attempt to capture the traffic of specific applications that are on the phone.
The specific ...
- 121
1
vote
1
answer
4k
views
Anti-tampering techniques in Android APK's
I'm reverse engineering an Android app, and it has some kind of anti-tamper protection. The problem is that I can't find it anywhere in the smali files.
Even if I just re-sign the official APK that I ...
- 13
Hot Network Questions
- Is it a Frog List?
- Can 9V train motors be linked and work together via the top power stud connection?
- What do these tire markings mean?
- What does this screw do (on my bicycle)?
- Why does People's Republic of China (PRC) tolerate the existence of a "de facto embassy" of the Republic of China (ROC) in Russia?
- Has the ICC ever tried to arrest any Western or pro-Western politician?
- Is Arcana the only profiency in 5e that locks something behind the *skill* profiency system?
- Practicality of building a space station in the tail of a comet
- Why does everyone in Harry Potter make a giant cauldron of potion?
- What's an "ego weapon"?
- Is there a term that describes reducing a person's identity to certain characteristics?
- Generating TOTP for 2FA directly from the computer (no mobile device)
- Spokes damaged by chain – should they be replaced?
- Word for a choice that is not really a choice
- Who are the top 10 youngest players to reach a FIDE standard rating of 2200?
- Can underage people who commit a crime while underaged but are later charged with the same crime after turning 18 be tried as an adult?
- Do I have to replace one broken spring on a dual spring garage door?
- Did Sweden experience lower all-cause mortality during the pandemic?
- How did my CO detector know it had reached EOL?
- How to open a PDF file with "Master PDF Editor" application from terminal?
- I found a security vulnerability in our code. How do I present it in our sprint review?
- Development pattern for interactive in-game tutorials
- How to finish sheetrock where it meets uneven stone wall?
- Is Earth really flattened at the poles because of centrifugal force?