Questions tagged [apk]
Android Application Package is the package file format used by the Android operating system for distribution and installation of mobile applications.
116 questions
17
votes
7
answers
59k
views
What are the tools use for reverse engineering android apk?
Currently, I only know about apktool.
But is there any tools that helps in checking the code, editing it and compiling it back to apk?
- 279
16
votes
1
answer
27k
views
Debugging third party android APKs
What are some ways to debug third party android apps (apps you don't have the source code to)? I would like to step through the APK instruction by instruction, and possibly set breakpoints on certain ...
- 400
15
votes
1
answer
11k
views
Bypassing certificate pinning in android
I've spent the past 4 months trying to bypass certificate pinning in the Facebook android application so I can understand how it works, but I'm having trouble doing so.
I have tried using android ...
- 151
14
votes
8
answers
41k
views
Repackaging APK file using baksmali and smali
I am a student interested in Android Security. I was trying to modify a APK file using baksmali and smali. However, I am not able to run the repackaged app in my mobile. When I click on the icon it ...
- 303
7
votes
1
answer
2k
views
Inserting resources.properties file into an APK - language compatibility
I'm reverse engineering an android application. It's been a while since I've poked with this but I"m having an issue editing the APK to deal with some language areas.
The original app is from a ...
- 1,022
5
votes
1
answer
1k
views
Can a debug-apk be reverse engineered to make it a release-apk?
I am making a system in which the users can create Android applications. I want them to give an option to download a debug apk so that they can try it out first. After that, they have to pay for it to ...
user187
5
votes
1
answer
3k
views
Reverse engineering Android vendor system apps
I'm trying to reverse engineer certain Samsung system apps in the Galaxy S6 firmware system image, such as KnoxAttestationAgent.apk. I'm a noob when it comes to reverse engineering, and so far my ...
- 359
4
votes
1
answer
2k
views
How Do I get proficient at Reverse engineering?
Please bear with me as I explain this situation.
Maybe 10 days ago I took up the challenge of reverse engineering an Android app. Learning from scratch, I installed ADB, Apktool, Android Studio, ...
- 195
4
votes
1
answer
4k
views
Extract a secret from an Android apk or .so file
Context
As an exercise I am researching all methods of hiding a secret in an android mobile app binary... Yes I know that with more or less effort they can always be extracted with static analyses, ...
- 141
4
votes
2
answers
1k
views
Dalvik dex file version 036
I came upon a sample that indirectly contains classes.dex with the magic "Dalvik dex file version 036". If not for the version, the file seems to be normal and JEB loads it without any problem.
But ...
- 141
4
votes
2
answers
662
views
On reverse engineering an udp protocol to control a drone
My goal is to control my drone with my raspberry pi using python and not the app that is being delivered together with it.
First I connected the app to the drone, flew and used aircrack-ng to get the ...
4
votes
0
answers
79
views
How to edite a compiled Reactive Native file "main.bundle"
I bought I vacuum robot from Dreame and needed to replace the Lidar sensor myself as in my country (Brazil) don't have technical assistance, but now it is not working properly because it says that don'...
- 41
4
votes
1
answer
3k
views
Reverse engineering a flutter built apk
I was trying to reverse engineer an apk built with flutter. I actually feel like reversing flutter built apps did not get much reverse writeups on the community. one of the tools for the task ...
- 309
4
votes
0
answers
989
views
Android APK debugging: modify value of smali register
I am debugging an apk app that I do not have the sources for. I want to debug it on a smali level, not decompiled.
I used to do this with apktool, but looking at their website, smali-debugging is ...
- 463
3
votes
3
answers
4k
views
Android- hiding private keys in .so file
I am working on an application where we need to encrypt certain assets at compile time in Gradle. We then need to decrypt them with the same private key, so we are using a symmetric key system but we ...
3
votes
1
answer
458
views
does android apk contain game mechanics?
Let's say I have an apk of an android fighting game. The mechanics of the game includes how characters use their skills, how the damages are calculated, etc. Are such mechanics stored within the apk? ...
- 33
3
votes
2
answers
6k
views
Working with Android obfuscation
In the case of an PE file or an ELF file, there is quite a lot of material out there on how to approach deobfuscation, dumping from memory, reconstructing symbols etc. For android binaries that does ...
user1743
3
votes
1
answer
2k
views
Does Google encrypt APK when downloading it from Play Store?
I use Fiddler to get APK of applications that I need. I used it for a long time, and usually it is not a problem to find APK in Fiddler log.
In ancient times Google downloaded APK directly how it is ...
- 395
3
votes
3
answers
1k
views
Android (4.4+) SSL wireless sniffing without certificate changing
I wish to analyze the unencrypted data sent of SSL by an Android APK that uses certificate pinning.
This suspicious APK is used to configure a wireless device.
I need to determine two things:
...
- 41
3
votes
1
answer
2k
views
how to decompile or unite multipart dex class in an android apk file?
Some Android Apks contain multiple classes.dex files which are numbered like this: classes1.dex, classes2.dex ... and when i try to decompile them it would result into multiple source codes. Is there ...
- 131
3
votes
1
answer
609
views
How can I retrieve the encryption key in this code?
can anyone explain the following code? is it possible to retrieve the encryption key?
I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
- 309
3
votes
1
answer
557
views
Modifying (adding new logic) decompiled apk to log different kind of data causing problems (crash/bluetooth connection)
I have separately decompiled apk to smali/dalvik and to java classes. As apk is not obfuscated java code is pretty good to read and I can pretty easily see corresponding smali code.
So far I was able ...
- 33
3
votes
1
answer
163
views
DEX file referenced type is not defined in file
I am analyzing a dex file and to ease with reverse engineering, I converted it a jar so it could be decompiled. In the file android/support/v17/leanback/media/MediaControllerGlue.class, the following ...
- 396
3
votes
0
answers
148
views
Inverter BLE communication module receives commands in HCI_ACL but apk shows ATT
I have a solar inverter which can be queried through mobile apps, eSolar O&M or eSolar SET. My goal is to read values from the inverter (solar power, grid consumption...) by querying the device ...
- 141
3
votes
0
answers
536
views
How to decompile an APK written in Golang?
I recently started trying to learn basic reverse engineering and Golang. Decompiling Android apps written in C++ and Java/Kotlin seems easy as there are tons of documents and tools that enable you to ...
- 31
3
votes
2
answers
4k
views
Android APK reversing - Can't find the Main Class
I am reverse engineering an APK file. From the AndroidManifest.xml file, I found the class name (com.dfmlhsd.xecpwdugfsln.hnzpsm.KeQXGRNGu) corresponding to Main Action as shown below:
<...
- 775
2
votes
1
answer
2k
views
Debug 3rd-party apk with .so-files missing debug symbols
Apologies, if this has been asked before. I am reverse engineering a chinese app that connects to a BLE device, so I can inspect how it transmits the data. Using this official guide I decompiled my ...
- 21
2
votes
1
answer
149
views
Can obfuscation be applied on certain parts?
I am newbie to this field. I am still learning from your wonderful contributions, help and guidance.
I have had an app that i want to study in-depth. How the the it is constructed? What components ...
- 21
2
votes
1
answer
243
views
APK Reversing. Some code is hidden?
Sorry for my English. I accepted a challenge (part of the partial exams of the year) from my university professor of IT Security and Privacy. He gave me an APK and I need to find out how the login is ...
- 21
2
votes
1
answer
661
views
Need help decrypt xxtea encrypted Lua file from cocos2D game
I was trying to recreate this game because it was down but I really love it.
I tried to decompile the apk and I got the java code and the assets then I looked around the code and found out the main ...
- 23
2
votes
1
answer
4k
views
finding rest api urls after decompiling apk
i have two apk files , when i decompile them using apktool i can take a look at decompile code , so here is what really confuse me , in the first apk if i searched the hole files for strings witch ...
- 23
2
votes
1
answer
7k
views
Reconstructing Unity APK
Note: I am only doing this for educational purposes with no intent to redistribute
I have decompiled an APK built with Unity successfully (Somewhat).
Using an array of programs, I managed to extract ...
2
votes
1
answer
9k
views
Frida manipulating arguments - Android
I've attempting to learn how to use Frida to instrument android app, just for person interest.
So far I've managed to get my environment set up with a physical android tablet and I can successfully ...
- 31
2
votes
1
answer
3k
views
reversing apk - getting native code in classes.dex
I've start reversing some android application. I have a little experience in this subject, but i got stuck on a little matter.
The app i'm trying to reverse uses JNI (java native interface), meaning ...
- 123
2
votes
1
answer
96
views
How do you identify a software framework?
I downloaded a free app but I want to stop it from showing ads.
https://www.statista.com/statistics/869224/worldwide-software-developer-working-hours/
Apparently it's almost certainly in one of the ...
- 121
2
votes
1
answer
774
views
apk crashed on launch when re-signed with debug key
I sometimes decompile and recompile apks and make changes (like changing graphics, text etc...) normally I use apktool to decompile and recompile and then use testsign.jar to resign the apk with the ...
- 131
2
votes
1
answer
259
views
Any ways to combine Android APK with Expansion pack file?
I want to have only one APK that contains all files and resources without having to download expansion pack every time.
Is there any way to combine Android APK with Expansion pack file?
My expansion ...
- 639
2
votes
1
answer
272
views
App from playstore runs but the same apk crashes on sideload install
On my nougat device, I have downloaded an app from the playstore, which is running great. I then extracted the apk from the installed app, and uninstalled it and again successfully, with the package ...
- 31
2
votes
1
answer
591
views
Invalid file path error while trying to rebuild with apktool and aapt2
I am facing an error while try to repack an apk with apkool. below is the error trace.
W: error: invalid file path 'C:\Users\ccre\res\drawable2\abc_ic_search_api_material.xml'.
W: error: invalid file ...
- 309
2
votes
0
answers
207
views
APK / Decrypting [closed]
I'm new to Reverse Engineering, so I apologize if something is wrong.
There is a free program that requires a license key, which can no longer be bought and obtained. I'm trying to write a KeyGen or ...
- 21
2
votes
0
answers
533
views
Extract assets images from a games APK [closed]
I'm trying to remove some images from an android game, but when I try to view them in a hexadecimal viewer I see that they don't contain a PNG header, so I can't view them through the python PIL ...
- 21
2
votes
0
answers
73
views
Cant view some classes while inspecting APK's code
I'm trying to understand how the application works.
I used dex2jar utility to receive .jar file (d2j-dex2jar --force file.apk). And jd-gui to view it's classes.
I'm able to view the most of them. But ...
2
votes
0
answers
78
views
Reverse engineering of Process manager apk
Is there someone helps me to understand how to build the server of this apk https://lab52.io/blog/complete-dissection-of-an-apk-with-a-suspicious-c2-server/ ? I tried to disassemble the apk but it is ...
- 37
2
votes
1
answer
436
views
$$Lambda$(number) when decompiled Java bytecode
Why when I decompile a Java bytecode (which further was decompiled from .dex), I get $$Lambda$(number), in Java files, and it's not possible to build project with these java codes as it's insufficient ...
- 21
2
votes
0
answers
60
views
How to use smalivm and simplify to find a certain static constant from APK or remove confusion?
smalivm: Provides a virtual machine sandbox for executing Dalvik methods. After executing a method, it returns a graph containing all possible register and class values for every execution path.
I ...
- 21
2
votes
0
answers
962
views
How to export to *.so file after patching in ghidra
I'm using ghidra to patch an *.so file in the Android APK.
While exporting the patched file from ghidra, using the "Export program" option from the "File" menu, it don't have *.so in the supported "...
- 433
2
votes
0
answers
1k
views
Unable to attach java sources to APK being debugged in Android Studio -- Option not displayed
This article (https://developer.android.com/studio/debug/apk-debugger) explains how to debug third-party APKs and set breakpoints by attaching the java source (you can use decompiled code to get it ...
- 35
2
votes
0
answers
414
views
Android APK is somehow verifying package signatures without calling PackageManager.signatures
I'm reverse engineering a very popular Android app.
They perform some type of signature verification on the APK, however they do it without:
Calling PackageManager.signatures
Calling PackageInfo....
- 21
2
votes
0
answers
85
views
How to update reversed code of an updated application?
A few months ago I started to reverse engineer an Android app, and i have pretty much progress in it, but it's updated weekly. How should i go about updating the reversed code?
I searched for ways ...
- 21
2
votes
1
answer
859
views
APK Tools for Tinder 7.4.0 [closed]
I wanted to make some Tinder tools, and found some already made APIs.
I would like go through the process of discovering this private API by myself, since most of the articles are a bit out of date.
...
- 21