Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [apk]

Android Application Package is the package file format used by the Android operating system for distribution and installation of mobile applications.

0
votes
0answers
31 views

Runing x86 Android Shared Library under i386 ubuntu

I have .so library extracted from an .apk file for x86 architecture. (let's say libfoo.so) From the .smali code I can see that the library is loaded with System.loadLibrary(), and I can see the name ...
0
votes
0answers
31 views

Error when i start Chrome Remote Desktop app after recompile

I recompiled Chrome Remote Desktop Android app(with no change) and tried to run on my phone. But everytime i start the app, it just close immediately with error below. 2018-12-04 20:11:35.053 9136-...
0
votes
0answers
21 views

app crashing after removing analytics

I am trying to remove google analytics from the apk.I removed code from com/google/android/apps/analytics.And repacked the apk.But after instalation app is crashing.I used apktool for compilation and ...
1
vote
0answers
28 views

Common practices for 'hiding' a class within an Android application?

I've recently gotten into Android reverse engineering, and I've been messing around with some apps lately for education/research purposes to see how some things are done with private (mobile) APIs. ...
0
votes
0answers
32 views

Multidex android apk

I would reverse with idapro in dalkiv mode an app with more than dex file,but it only decompiles one file at a time. How to decompile all in one? Is there a plugin for idapro 7.0? Thanks
1
vote
1answer
39 views

Reconstructing Unity APK

Note: I am only doing this for educational purposes with no intent to redistribute I have decompiled an APK built with Unity successfully (Somewhat). Using an array of programs, I managed to extract ...
1
vote
1answer
185 views

Android APK reversing - Can't find the Main Class

I am reverse engineering an APK file. From the AndroidManifest.xml file, I found the class name (com.dfmlhsd.xecpwdugfsln.hnzpsm.KeQXGRNGu) corresponding to Main Action as shown below: <...
1
vote
0answers
138 views

Is there any way to access assembly-csharp from installed apk? (unity game, gamedata)

I'm playing a Japanese Unity game on my phone. I've translated everything that exist in the apk to English but the game downloads new content once you run the apk for the first time. Is there any way ...
0
votes
0answers
54 views

APK won't work anymore after compiling

I'm trying to reverse engineering an android app. Unpacked the APK with APKTOOL and edited some smali. Packed again and the app won't work (stuck on the first activity). Thought that I had done ...
0
votes
0answers
632 views

Bypass/Remove Install Referrer to let apk Install not from Google Play Store

Helo, I mod unity game to tweak some ability in assembly-csharp.dll. In nox emulator, non-root or rooted, install success and mod work. But i have problem in non root phone. If I install it when ...
3
votes
1answer
82 views

does android apk contain game mechanics?

Let's say I have an apk of an android fighting game. The mechanics of the game includes how characters use their skills, how the damages are calculated, etc. Are such mechanics stored within the apk? ...
2
votes
1answer
333 views

Does Google encrypt APK when downloading it from Play Store?

I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log. In ancient times Google downloaded APK directly how it is ...
0
votes
1answer
121 views

Android Reverse Engineering Network Traffic Stack Trace

Lets say an Android application sends out a traffic out to the server and expects a Json Response Request: https://server:port/userid=user1&token=randomstring7345 We want to replicate the ...
-1
votes
2answers
36 views

How to view SDK files and is it mandatory to run modified apk on rooted device

I am performing reverse engineering on android apk using apktool. Is there any way I can view the code in SDK/NDK files ? if i make any change in the .smali files is it necessary to run the modified ...
0
votes
0answers
63 views

Help with an APK

I am trying to get some data from a game called "Chain Strike". A mobile game from Com2Us. It's a unity based game. I was able to find sprites, textures, and sounds in the asset bundles, but what I ...
2
votes
3answers
4k views

What are the tools use for reverse engineering android apk?

Currently, I only know about apktool. But is there any tools that helps in checking the code, editing it and compiling it back to apk?
0
votes
2answers
312 views

verifyError in youtube android app modification

I try to decompile youtube android application and modify it but when I build the application and install on a virtual device faced with below error: E/AndroidRuntime(1782): java.lang.VerifyError: ...
2
votes
0answers
52 views

How to update reversed code of an updated application?

A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code? I searched for ways ...
1
vote
3answers
318 views

Android- hiding private keys in .so file

I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
0
votes
0answers
50 views

Reverse engineer hash generation inside app

I am trying to reverse engineer an app that passes a generated string in HTTP headers. I have tried APKTool to see if I can find the algorithm behind its generation, but I was never able to find the ...
0
votes
1answer
411 views

Debugging third party apk without modifying apk

I have seen the ways to modify an apk using apktools and adding android:debugging="true" but I have an apk that check for changes and crashes if any changes are made. Is it possible to capture the ...
0
votes
1answer
720 views

Need help reversing an Android Game

I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
2
votes
1answer
427 views

APK Tools for Tinder 7.4.0 [closed]

I wanted to make some Tinder tools, and found some already made APIs. I would like go through the process of discovering this private API by myself, since most of the articles are a bit out of date. ...
1
vote
2answers
678 views

Opening non-standard PNG files extracted from Android app - missing signature and IHDR chunk

I am unable to open PNG files extracted from a certain Android app. I can't open them with the stock Android Gallery app. I can't open them in image browsers after downloading them on my computer. ...
0
votes
1answer
915 views

How to combine 2 dex files into a single dex file for more complete disassembly by IDA Pro

Most apk files, when disassembled, produces 2 dex files instead of one. However since IDA Pro only allows the loading of one dex file at a time,it may result in missing information as a result of the ...
0
votes
1answer
53 views

Need help understanding “garbage” data in https request

I managed to overcome certificate pinning in an android application and I am now able to view all the HTTPS request in plain text. However, I came across this request that I still do not understand: ...
0
votes
2answers
3k views

Sniffing https traffic of an android app

I want to do a challenge: automise some tasks that I do in a game so I can get the max of points. To do that, I need to know the url called and the parameters that are used in the Game. After setting ...
1
vote
3answers
1k views

Can apk files have protection against being debugged?

As part of a bug bounty program, I am trying to reverse engineer the bumble android mobile application via dynamic analysis. I find that if I use apktool to disassemble the apk and reassemble it again ...
0
votes
2answers
301 views

Smali vs Decompilation for malware detection in apk files

When it comes to reversing apk files, I understand that are mainly 2 approaches. The first involves using a decompilation engine which will try to produce java files which are more readable but can be ...
0
votes
0answers
1k views

How to decompile obfuscated APK file and get specific information

Suppose there is an apk file download link : http://www.wandoujia.com/apps/com.cmcc.migutvtwo/download?pos=detail-ndownload-com.cmcc.migutvtwo I can install it and use Http Traffic sniffing tool to ...
0
votes
1answer
2k views

Anti-tampering techniques in Android APK's

I'm reverse engineering an Android app, and it has some kind of anti-tamper protection. The problem is that I can't find it anywhere in the smali files. Even if I just re-sign the official APK that I ...
1
vote
2answers
206 views

Reverse engineer encrypted text file if I have both pre and post encryption files [closed]

As per the title, I have an encrypted text file that is generated by an Android app. I then have to send that off to the people whom made the app for them to decode it and send it back. Not ideal as ...
5
votes
2answers
421 views

Dalvik dex file version 036

I came upon a sample that indirectly contains classes.dex with the magic "Dalvik dex file version 036". If not for the version, the file seems to be normal and JEB loads it without any problem. But ...
0
votes
2answers
5k views

Extract decrypted Assembly-CSharp.dll from APK via IDA

My friend and I am trying to decrypt the Assembly-CSharp.dll file from an Android game which was written in Unity3D. Normally these files are readable when using something like JustDecompile, but this ...
1
vote
1answer
1k views

Saving .so file with IDA

I edited a ".so" file (which extracted from an APK) with IDA Pro, and now I am trying to save it with the same format. But it seems that I cannot find it. Could you please explain to me step by step ...
0
votes
0answers
100 views

Reversing so lib's with IDA

When i decompile APK file there are .so lib's i choise the one with my CPU architecture in my case ARMv7. The .so lib's are writen in C#, but i can't see the fine C sharp code, even when i decompile ...
2
votes
1answer
2k views

Frida manipulating arguments - Android

I've attempting to learn how to use Frida to instrument android app, just for person interest. So far I've managed to get my environment set up with a physical android tablet and I can successfully ...
-1
votes
1answer
396 views

Reverse Engineering an APP With Frida [closed]

I am trying to reverse engineer an app but I am having problems unlike the previous apps that I reverse engineered..... When Untouched the app let's you login perfectly but when I reverse engineer it ...
1
vote
1answer
166 views

Certain classes do not show up in JDB while they are present in source code

I'm debugging a closed-source Android app with jdb. In the output produced by the apktool, I see class com.myapp.j.d.d, as well as a/b/c/e, but at run-time, I see only com.myapp.j.d.e. Why is that ...
0
votes
1answer
483 views

Reversed APK crashes after install

I'm trying to reverse an apk, overload some function and rebuild/sign it. I should have done everything in the correct way; the only thing I edited is a function that check if the device is rooted. ...
2
votes
1answer
1k views

reversing apk - getting native code in classes.dex

I've start reversing some android application. I have a little experience in this subject, but i got stuck on a little matter. The app i'm trying to reverse uses JNI (java native interface), meaning ...
0
votes
1answer
164 views

What's the most straightforward way to change a simple thing in Android APK java application?

I need to make some simple tweaks to Android APP that keeps crashing. Viewing the code and seeing possible problems is pretty simple. I can either: Use Apktool (eg. apktool d name_of_apk.apk -o ...
2
votes
0answers
194 views

Why can I not read .so file public functions compiled in C?

I can read the public functions (name and full signature) of some .so files that associated with Android APK, whereas others only show the function name. For example, running this command only ...
0
votes
1answer
176 views

Analyzing an APK without tools [closed]

I know you can unpack APKs with apktool and the likes, however we're doing an exercise at uni where we're supposed to get some info like permissions declared and permissions used from some APKs ...
4
votes
1answer
2k views

Reverse engineering Android vendor system apps

I'm trying to reverse engineer certain Samsung system apps in the Galaxy S6 firmware system image, such as KnoxAttestationAgent.apk. I'm a noob when it comes to reverse engineering, and so far my ...
1
vote
1answer
541 views

I'm decompiling an apk file to learn how the creator designed the UI for their app. Are these layout files obfuscated?

I'm new to decompiling apps. Most of the apps I decompile aren't very popular, so obfuscation hasn't been a problem yet. I'm not entirely sure what obfuscation looks like. The current app I'm looking ...
15
votes
1answer
9k views

Bypassing certificate pinning in android

I've spent the past 4 months trying to bypass certificate pinning in the Facebook android application so I can understand how it works, but I'm having trouble doing so. I have tried using android ...
3
votes
2answers
4k views

Working with Android obfuscation

In the case of an PE file or an ELF file, there is quite a lot of material out there on how to approach deobfuscation, dumping from memory, reconstructing symbols etc. For android binaries that does ...
5
votes
1answer
860 views

How Do I get proficient at Reverse engineering?

Please bare with me as I explain this situation. Maybe 10 days ago I took up the challenge of reverse engineering an Android app. Learning from scratch, I installed ADB, Apktool, Android Studio, ...
1
vote
1answer
828 views

Android - Analyzing complex hash algorithm

An APK I'm working on uses some sort of algorithm to generate a hash which is sent along with an HTTP request. I want to figure out how the algorithm works. Decompiling the APK to Java is of no help ...