Questions tagged [apk]
Android Application Package is the package file format used by the Android operating system for distribution and installation of mobile applications.
116 questions
-1
votes
1
answer
4k
views
Change androidmanifest.xml file within apk
I am able to unpack an android apk file with apktool, but when I am repacking the apk file using apktool, it just crashes with errors, and ibotpeaches seems not patching those errors for years. Now ...
- 309
2
votes
1
answer
591
views
Invalid file path error while trying to rebuild with apktool and aapt2
I am facing an error while try to repack an apk with apkool. below is the error trace.
W: error: invalid file path 'C:\Users\ccre\res\drawable2\abc_ic_search_api_material.xml'.
W: error: invalid file ...
- 309
0
votes
1
answer
2k
views
Android app crashes even while not edited, how can I solve it?
Installed an application from google playstore and then transferred to it my computer to apparently edit it and without any changes I made to it then I tried to install it through ADB, well the ...
- 309
3
votes
1
answer
609
views
How can I retrieve the encryption key in this code?
can anyone explain the following code? is it possible to retrieve the encryption key?
I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
- 309
1
vote
1
answer
1k
views
How to reverse engineering a proguarded .apk? [closed]
Lets say you have android1.apk file coded with proguard enable.
I want to reverse engineer it in such a way that it shows the original methods names instead letters of alphabets, example bellow
...
0
votes
1
answer
123
views
Is there a way to reverse engineer this small tool "website2apk" and design my own? [closed]
I recently came across this tool and was amazed by its size and how it can build release-apk, without even bothering about Android development environment set up on the machine, neither Cordova nor ...
- 3
1
vote
0
answers
82
views
(Help) APK Decomplied unreadable .pngs
I decompiled an Android game APK to look at the source code / resources and the .pngs give me the error "It looks like we don't support this file format" when I try to view them in the Photos App. I'...
- 11
3
votes
1
answer
163
views
DEX file referenced type is not defined in file
I am analyzing a dex file and to ease with reverse engineering, I converted it a jar so it could be decompiled. In the file android/support/v17/leanback/media/MediaControllerGlue.class, the following ...
- 396
1
vote
0
answers
581
views
Calling functions of a shared object (.so) extracted from an APK
Decompiling a regular Android application I noticed that its code uses some native functions. So, unpacking the (.apk) file I found the usual "lib" folder and under that a series of folders for ...
- 11
4
votes
0
answers
989
views
Android APK debugging: modify value of smali register
I am debugging an apk app that I do not have the sources for. I want to debug it on a smali level, not decompiled.
I used to do this with apktool, but looking at their website, smali-debugging is ...
- 463
2
votes
0
answers
962
views
How to export to *.so file after patching in ghidra
I'm using ghidra to patch an *.so file in the Android APK.
While exporting the patched file from ghidra, using the "Export program" option from the "File" menu, it don't have *.so in the supported "...
- 433
2
votes
0
answers
1k
views
Unable to attach java sources to APK being debugged in Android Studio -- Option not displayed
This article (https://developer.android.com/studio/debug/apk-debugger) explains how to debug third-party APKs and set breakpoints by attaching the java source (you can use decompiled code to get it ...
- 35
0
votes
0
answers
215
views
(Help)Apk Decomplied unreadable files
I'm developing an android-based game for my school project.
I chose an .apk to reference the visual parts.
I've decompiled the .apk file I've specified. I can't view the image files I need.
files ...
- 1
0
votes
1
answer
215
views
decomplied apk with bad parameters
I'm trying to reverse engineering an android app API so this is what I tried:
First the app was using Okhttp certificate pinning and I couldn't track the URLs with Charles then I tried this method ...
- 71
4
votes
1
answer
4k
views
Extract a secret from an Android apk or .so file
Context
As an exercise I am researching all methods of hiding a secret in an android mobile app binary... Yes I know that with more or less effort they can always be extracted with static analyses, ...
- 141
2
votes
0
answers
414
views
Android APK is somehow verifying package signatures without calling PackageManager.signatures
I'm reverse engineering a very popular Android app.
They perform some type of signature verification on the APK, however they do it without:
Calling PackageManager.signatures
Calling PackageInfo....
- 21
1
vote
0
answers
266
views
Common practices for 'hiding' a class within an Android application?
I've recently gotten into Android reverse engineering, and I've been messing around with some apps lately for education/research purposes to see how some things are done with private (mobile) APIs.
...
- 11
2
votes
1
answer
7k
views
Reconstructing Unity APK
Note: I am only doing this for educational purposes with no intent to redistribute
I have decompiled an APK built with Unity successfully (Somewhat).
Using an array of programs, I managed to extract ...
3
votes
2
answers
4k
views
Android APK reversing - Can't find the Main Class
I am reverse engineering an APK file. From the AndroidManifest.xml file, I found the class name (com.dfmlhsd.xecpwdugfsln.hnzpsm.KeQXGRNGu) corresponding to Main Action as shown below:
<...
- 775
1
vote
0
answers
1k
views
Is there any way to access assembly-csharp from installed apk? (unity game, gamedata)
I'm playing a Japanese Unity game on my phone. I've translated everything that exist in the apk to English but the game downloads new content once you run the apk for the first time. Is there any way ...
- 11
3
votes
1
answer
458
views
does android apk contain game mechanics?
Let's say I have an apk of an android fighting game. The mechanics of the game includes how characters use their skills, how the damages are calculated, etc. Are such mechanics stored within the apk? ...
- 33
3
votes
1
answer
2k
views
Does Google encrypt APK when downloading it from Play Store?
I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log.
In ancient times Google downloaded APK directly how it is ...
- 395
1
vote
1
answer
1k
views
Android Reverse Engineering Network Traffic Stack Trace
Lets say an Android application sends out a traffic out to the server and expects a Json Response
Request:
https://server:port/userid=user1&token=randomstring7345
We want to replicate the ...
- 13
-1
votes
2
answers
77
views
How to view SDK files and is it mandatory to run modified apk on rooted device
I am performing reverse engineering on android apk using apktool.
Is there any way I can view the code in SDK/NDK files ?
if i make any change in the .smali files is it necessary to run the modified ...
- 101
17
votes
7
answers
59k
views
What are the tools use for reverse engineering android apk?
Currently, I only know about apktool.
But is there any tools that helps in checking the code, editing it and compiling it back to apk?
- 279
0
votes
2
answers
2k
views
verifyError in youtube android app modification
I try to decompile youtube android application and modify it but when I build the application and install on a virtual device faced with below error:
E/AndroidRuntime(1782): java.lang.VerifyError: ...
2
votes
0
answers
85
views
How to update reversed code of an updated application?
A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code?
I searched for ways ...
- 21
3
votes
3
answers
4k
views
Android- hiding private keys in .so file
I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
0
votes
1
answer
1k
views
Debugging third party apk without modifying apk
I have seen the ways to modify an apk using apktools and adding android:debugging="true" but I have an apk that check for changes and crashes if any changes are made. Is it possible to capture the ...
- 135
0
votes
1
answer
2k
views
Need help reversing an Android Game
I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
- 175
2
votes
1
answer
859
views
APK Tools for Tinder 7.4.0 [closed]
I wanted to make some Tinder tools, and found some already made APIs.
I would like go through the process of discovering this private API by myself, since most of the articles are a bit out of date.
...
- 21
1
vote
2
answers
3k
views
Opening non-standard PNG files extracted from Android app - missing signature and IHDR chunk
I am unable to open PNG files extracted from a certain Android app. I can't open them with the stock Android Gallery app. I can't open them in image browsers after downloading them on my computer. ...
1
vote
1
answer
3k
views
How to combine 2 dex files into a single dex file for more complete disassembly by IDA Pro
Most apk files, when disassembled, produces 2 dex files instead of one. However since IDA Pro only allows the loading of one dex file at a time,it may result in missing information as a result of the ...
- 175
0
votes
1
answer
133
views
Need help understanding "garbage" data in https request
I managed to overcome certificate pinning in an android application and I am now able to view all the HTTPS request in plain text. However, I came across this request that I still do not understand:
...
- 175
1
vote
2
answers
15k
views
Sniffing https traffic of an android app
I want to do a challenge: automise some tasks that I do in a game so I can get the max of points.
To do that, I need to know the url called and the parameters that are used in the Game. After setting ...
- 111
2
votes
3
answers
3k
views
Can apk files have protection against being debugged?
As part of a bug bounty program, I am trying to reverse engineer the bumble android mobile application via dynamic analysis. I find that if I use apktool to disassemble the apk and reassemble it again ...
- 175
0
votes
2
answers
595
views
Smali vs Decompilation for malware detection in apk files
When it comes to reversing apk files, I understand that are mainly 2 approaches. The first involves using a decompilation engine which will try to produce java files which are more readable but can be ...
- 175
1
vote
1
answer
4k
views
Anti-tampering techniques in Android APK's
I'm reverse engineering an Android app, and it has some kind of anti-tamper protection. The problem is that I can't find it anywhere in the smali files.
Even if I just re-sign the official APK that I ...
- 113
1
vote
2
answers
1k
views
Reverse engineer encrypted text file if I have both pre and post encryption files [closed]
As per the title, I have an encrypted text file that is generated by an Android app. I then have to send that off to the people whom made the app for them to decode it and send it back. Not ideal as ...
4
votes
2
answers
1k
views
Dalvik dex file version 036
I came upon a sample that indirectly contains classes.dex with the magic "Dalvik dex file version 036". If not for the version, the file seems to be normal and JEB loads it without any problem.
But ...
- 141
0
votes
2
answers
11k
views
Extract decrypted Assembly-CSharp.dll from APK via IDA
My friend and I am trying to decrypt the Assembly-CSharp.dll file from an Android game which was written in Unity3D.
Normally these files are readable when using something like JustDecompile, but this ...
- 1
1
vote
1
answer
4k
views
Saving .so file with IDA
I edited a ".so" file (which extracted from an APK) with IDA Pro, and now I am trying to save it with the same format. But it seems that I cannot find it.
Could you please explain to me step by step ...
- 11
2
votes
1
answer
9k
views
Frida manipulating arguments - Android
I've attempting to learn how to use Frida to instrument android app, just for person interest.
So far I've managed to get my environment set up with a physical android tablet and I can successfully ...
- 31
-1
votes
1
answer
578
views
Reverse Engineering an APP With Frida [closed]
I am trying to reverse engineer an app but I am having problems unlike the previous apps that I reverse engineered.....
When Untouched the app let's you login perfectly but when I reverse engineer it ...
- 11
1
vote
1
answer
279
views
Certain classes do not show up in JDB while they are present in source code
I'm debugging a closed-source Android app with jdb. In the output produced by the apktool, I see class com.myapp.j.d.d, as well as a/b/c/e, but at run-time, I see only com.myapp.j.d.e. Why is that ...
- 53
0
votes
1
answer
2k
views
Reversed APK crashes after install
I'm trying to reverse an apk, overload some function and rebuild/sign it.
I should have done everything in the correct way; the only thing I edited is a function that check if the device is rooted.
...
2
votes
1
answer
3k
views
reversing apk - getting native code in classes.dex
I've start reversing some android application. I have a little experience in this subject, but i got stuck on a little matter.
The app i'm trying to reverse uses JNI (java native interface), meaning ...
- 123
0
votes
1
answer
1k
views
What's the most straightforward way to change a simple thing in Android APK java application?
I need to make some simple tweaks to Android APP that keeps crashing. Viewing the code and seeing possible problems is pretty simple.
I can either:
Use Apktool (eg. apktool d name_of_apk.apk -o ...
- 143
2
votes
0
answers
302
views
Why can I not read .so file public functions compiled in C?
I can read the public functions (name and full signature) of some .so files that associated with Android APK, whereas others only show the function name.
For example, running this command only ...
- 21
0
votes
1
answer
253
views
Analyzing an APK without tools [closed]
I know you can unpack APKs with apktool and the likes, however we're doing an exercise at uni where we're supposed to get some info like permissions declared and permissions used from some APKs ...
