Questions tagged [apk]

Android Application Package is the package file format used by the Android operating system for distribution and installation of mobile applications.

Filter by
Sorted by
Tagged with
14
votes
1answer
10k views

Bypassing certificate pinning in android

I've spent the past 4 months trying to bypass certificate pinning in the Facebook android application so I can understand how it works, but I'm having trouble doing so. I have tried using android ...
11
votes
8answers
29k views

Repackaging APK file using baksmali and smali

I am a student interested in Android Security. I was trying to modify a APK file using baksmali and smali. However, I am not able to run the repackaged app in my mobile. When I click on the icon it ...
10
votes
1answer
18k views

Debugging third party android APKs

What are some ways to debug third party android apps (apps you don't have the source code to)? I would like to step through the APK instruction by instruction, and possibly set breakpoints on certain ...
8
votes
5answers
28k views

What are the tools use for reverse engineering android apk?

Currently, I only know about apktool. But is there any tools that helps in checking the code, editing it and compiling it back to apk?
6
votes
1answer
2k views

Inserting resources.properties file into an APK - language compatibility

I'm reverse engineering an android application. It's been a while since I've poked with this but I"m having an issue editing the APK to deal with some language areas. The original app is from a ...
4
votes
1answer
1k views

How Do I get proficient at Reverse engineering?

Please bare with me as I explain this situation. Maybe 10 days ago I took up the challenge of reverse engineering an Android app. Learning from scratch, I installed ADB, Apktool, Android Studio, ...
4
votes
1answer
1k views

Can a debug-apk be reverse engineered to make it a release-apk?

I am making a system in which the users can create Android applications. I want them to give an option to download a debug apk so that they can try it out first. After that, they have to pay for it to ...
4
votes
1answer
3k views

Reverse engineering Android vendor system apps

I'm trying to reverse engineer certain Samsung system apps in the Galaxy S6 firmware system image, such as KnoxAttestationAgent.apk. I'm a noob when it comes to reverse engineering, and so far my ...
4
votes
2answers
666 views

Dalvik dex file version 036

I came upon a sample that indirectly contains classes.dex with the magic "Dalvik dex file version 036". If not for the version, the file seems to be normal and JEB loads it without any problem. But ...
3
votes
1answer
234 views

does android apk contain game mechanics?

Let's say I have an apk of an android fighting game. The mechanics of the game includes how characters use their skills, how the damages are calculated, etc. Are such mechanics stored within the apk? ...
3
votes
2answers
5k views

Working with Android obfuscation

In the case of an PE file or an ELF file, there is quite a lot of material out there on how to approach deobfuscation, dumping from memory, reconstructing symbols etc. For android binaries that does ...
3
votes
0answers
203 views

Android APK debugging: modify value of smali register

I am debugging an apk app that I do not have the sources for. I want to debug it on a smali level, not decompiled. I used to do this with apktool, but looking at their website, smali-debugging is ...
2
votes
3answers
928 views

Android- hiding private keys in .so file

I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
2
votes
1answer
1k views

Does Google encrypt APK when downloading it from Play Store?

I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log. In ancient times Google downloaded APK directly how it is ...
2
votes
1answer
828 views

Extract a secret from an Android apk or .so file

Context As an exercise I am researching all methods of hiding a secret in an android mobile app binary... Yes I know that with more or less effort they can always be extracted with static analyses, ...
2
votes
1answer
4k views

Frida manipulating arguments - Android

I've attempting to learn how to use Frida to instrument android app, just for person interest. So far I've managed to get my environment set up with a physical android tablet and I can successfully ...
2
votes
1answer
2k views

reversing apk - getting native code in classes.dex

I've start reversing some android application. I have a little experience in this subject, but i got stuck on a little matter. The app i'm trying to reverse uses JNI (java native interface), meaning ...
2
votes
2answers
1k views

Android (4.4+) SSL wireless sniffing without certificate changing

I wish to analyze the unencrypted data sent of SSL by an Android APK that uses certificate pinning. This suspicious APK is used to configure a wireless device. I need to determine two things: ...
2
votes
0answers
155 views

Android APK is somehow verifying package signatures without calling PackageManager.signatures

I'm reverse engineering a very popular Android app. They perform some type of signature verification on the APK, however they do it without: Calling PackageManager.signatures Calling PackageInfo....
2
votes
1answer
2k views

Reconstructing Unity APK

Note: I am only doing this for educational purposes with no intent to redistribute I have decompiled an APK built with Unity successfully (Somewhat). Using an array of programs, I managed to extract ...
2
votes
0answers
64 views

How to update reversed code of an updated application?

A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code? I searched for ways ...
2
votes
1answer
635 views

APK Tools for Tinder 7.4.0 [closed]

I wanted to make some Tinder tools, and found some already made APIs. I would like go through the process of discovering this private API by myself, since most of the articles are a bit out of date. ...
2
votes
0answers
251 views

Why can I not read .so file public functions compiled in C?

I can read the public functions (name and full signature) of some .so files that associated with Android APK, whereas others only show the function name. For example, running this command only ...
1
vote
2answers
1k views

Opening non-standard PNG files extracted from Android app - missing signature and IHDR chunk

I am unable to open PNG files extracted from a certain Android app. I can't open them with the stock Android Gallery app. I can't open them in image browsers after downloading them on my computer. ...
1
vote
1answer
869 views

Android APK reversing - Can't find the Main Class

I am reverse engineering an APK file. From the AndroidManifest.xml file, I found the class name (com.dfmlhsd.xecpwdugfsln.hnzpsm.KeQXGRNGu) corresponding to Main Action as shown below: <...
1
vote
1answer
3k views

Anti-tampering techniques in Android APK's

I'm reverse engineering an Android app, and it has some kind of anti-tamper protection. The problem is that I can't find it anywhere in the smali files. Even if I just re-sign the official APK that I ...
1
vote
1answer
1k views

How to combine 2 dex files into a single dex file for more complete disassembly by IDA Pro

Most apk files, when disassembled, produces 2 dex files instead of one. However since IDA Pro only allows the loading of one dex file at a time,it may result in missing information as a result of the ...
1
vote
2answers
7k views

Sniffing https traffic of an android app

I want to do a challenge: automise some tasks that I do in a game so I can get the max of points. To do that, I need to know the url called and the parameters that are used in the Game. After setting ...
1
vote
2answers
375 views

Reverse engineer encrypted text file if I have both pre and post encryption files [closed]

As per the title, I have an encrypted text file that is generated by an Android app. I then have to send that off to the people whom made the app for them to decode it and send it back. Not ideal as ...
1
vote
1answer
2k views

Saving .so file with IDA

I edited a ".so" file (which extracted from an APK) with IDA Pro, and now I am trying to save it with the same format. But it seems that I cannot find it. Could you please explain to me step by step ...
1
vote
1answer
639 views

I'm decompiling an apk file to learn how the creator designed the UI for their app. Are these layout files obfuscated?

I'm new to decompiling apps. Most of the apps I decompile aren't very popular, so obfuscation hasn't been a problem yet. I'm not entirely sure what obfuscation looks like. The current app I'm looking ...
1
vote
1answer
887 views

Android - Analyzing complex hash algorithm

An APK I'm working on uses some sort of algorithm to generate a hash which is sent along with an HTTP request. I want to figure out how the algorithm works. Decompiling the APK to Java is of no help ...
1
vote
2answers
2k views

How to verify that an Android Application & Library is correctly obfuscated

I have developed an Android Application with some data crunching inside a C library (NDK). In order to protect the library code: I have obfuscated the code with ProGuard and exported it in ...
1
vote
0answers
41 views

(Help) APK Decomplied unreadable .pngs

I decompiled an Android game APK to look at the source code / resources and the .pngs give me the error "It looks like we don't support this file format" when I try to view them in the Photos App. I'...
1
vote
1answer
41 views

DEX file referenced type is not defined in file

I am analyzing a dex file and to ease with reverse engineering, I converted it a jar so it could be decompiled. In the file android/support/v17/leanback/media/MediaControllerGlue.class, the following ...
1
vote
0answers
65 views

Calling functions of a shared object (.so) extracted from an APK

Decompiling a regular Android application I noticed that its code uses some native functions. So, unpacking the (.apk) file I found the usual "lib" folder and under that a series of folders for ...
1
vote
0answers
237 views

How to export to *.so file after patching in ghidra

I'm using ghidra to patch an *.so file in the Android APK. While exporting the patched file from ghidra, using the "Export program" option from the "File" menu, it don't have *.so in the supported "...
1
vote
0answers
128 views

Unable to attach java sources to APK being debugged in Android Studio — Option not displayed

This article (https://developer.android.com/studio/debug/apk-debugger) explains how to debug third-party APKs and set breakpoints by attaching the java source (you can use decompiled code to get it ...
1
vote
0answers
77 views

Common practices for 'hiding' a class within an Android application?

I've recently gotten into Android reverse engineering, and I've been messing around with some apps lately for education/research purposes to see how some things are done with private (mobile) APIs. ...
1
vote
0answers
391 views

Is there any way to access assembly-csharp from installed apk? (unity game, gamedata)

I'm playing a Japanese Unity game on my phone. I've translated everything that exist in the apk to English but the game downloads new content once you run the apk for the first time. Is there any way ...
1
vote
3answers
2k views

Can apk files have protection against being debugged?

As part of a bug bounty program, I am trying to reverse engineer the bumble android mobile application via dynamic analysis. I find that if I use apktool to disassemble the apk and reassemble it again ...
1
vote
0answers
550 views

recompiling android app - native method not found

Been trying at this for over a week, and I'm able to modify the needed sections, however I'm running into a major issue while trying to recompile the APK that is making the whole task atrocious. So I'...
1
vote
1answer
186 views

Certain classes do not show up in JDB while they are present in source code

I'm debugging a closed-source Android app with jdb. In the output produced by the apktool, I see class com.myapp.j.d.d, as well as a/b/c/e, but at run-time, I see only com.myapp.j.d.e. Why is that ...
0
votes
1answer
666 views

Debugging third party apk without modifying apk

I have seen the ways to modify an apk using apktools and adding android:debugging="true" but I have an apk that check for changes and crashes if any changes are made. Is it possible to capture the ...
0
votes
2answers
8k views

Extract decrypted Assembly-CSharp.dll from APK via IDA

My friend and I am trying to decrypt the Assembly-CSharp.dll file from an Android game which was written in Unity3D. Normally these files are readable when using something like JustDecompile, but this ...
0
votes
1answer
1k views

Need help reversing an Android Game

I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
0
votes
1answer
55 views

Need help understanding “garbage” data in https request

I managed to overcome certificate pinning in an android application and I am now able to view all the HTTPS request in plain text. However, I came across this request that I still do not understand: ...
0
votes
2answers
399 views

Smali vs Decompilation for malware detection in apk files

When it comes to reversing apk files, I understand that are mainly 2 approaches. The first involves using a decompilation engine which will try to produce java files which are more readable but can be ...
0
votes
1answer
553 views

What's the most straightforward way to change a simple thing in Android APK java application?

I need to make some simple tweaks to Android APP that keeps crashing. Viewing the code and seeing possible problems is pretty simple. I can either: Use Apktool (eg. apktool d name_of_apk.apk -o ...
0
votes
2answers
548 views

How to monitor APK files in Android System

Is there a monitoring tool for Android except logcat which works like Process Monitor in Windows ? Thanks