Questions tagged [java]

Java is an object-oriented language and runtime environment (JRE). Java programs are platform independent, because they are compiled to bytecode and their execution is handled by a Virtual Machine called the Java VM or JVM.

Filter by
Sorted by
Tagged with
0 votes
1 answer
26 views

Get the jar from exe4j executable

I've read this question and it is not a duplicate to mine. I have a .exe file which has different contents inside when opened with 7zip. However let's say I know that it uses EXE4J, how can I ...
Grinding For Reputation's user avatar
2 votes
1 answer
153 views

How to hook RuntimeException to prevent crashes?

I tried to find out how RuntimeException works internally in cs.android.com so I can understand how to prevent crashes but didn't find anything useful and I have no clue how to analyze components-...
IVs's user avatar
  • 137
0 votes
0 answers
36 views

how to set a BP on button in SunAwtCanvas in x96dbg

I'm trying to debug a program in x96dbg that I think this is written in Matlab. There is no string related to buttons or something interesting. Then I go to Handles tab to find buttons and set break ...
owl's user avatar
  • 1
1 vote
0 answers
117 views

Frida: how to hook a synthetic class

When reverse engineering an APK I came across a class that was marked synthetic. I have used JADX decompiler. The simplified result I got was: package com; public final class zz6 extends B implements ...
Sven Onderbeke's user avatar
0 votes
1 answer
215 views

Modifying a single .class file in an obfuscated JAR

i am trying to modify a jar that is partly obfuscated (and what i want to modify is in this part). I can use Recaf, it will decompile it well and I can save modifications and export program without ...
FluffyMuffin47's user avatar
1 vote
1 answer
537 views

Frida Android how to change value of array passed to method

Let's assume we have a such code snippet: public class Test { public void testArrayValue() { Object[] objects = new Object[1]; fillObject(objects); Log.d("test", (String)...
alx's user avatar
  • 13
0 votes
0 answers
480 views

How does the Easy Victory cheat get data from another app in real time?

Easy Victory was developed in Java for Android I was very curious about how Easy Victory takes data from the game's balls and billiard cue force/velocity to calculate trajectories This is not a mod ...
Jonathan Silva's user avatar
1 vote
1 answer
216 views

Removing Ghidra auto-generated labels and create function. Overlapping namespace error

I am attempting to write a script to parse a function table containing structs that look like this: struct func_table_entry { void (* func)(void *); byte unknown1; byte unknown2; byte ...
Cole's user avatar
  • 11
0 votes
0 answers
159 views

How can I find which JNI library implements a java native method at runtime for Android applications?

I am doing security research, my target application includes some JNI libraries which implements some native java methods I am interested in. This app is obfuscated, I can't directly find the library ...
hldev's user avatar
  • 101
2 votes
0 answers
193 views

APK / Decrypting [closed]

I'm new to Reverse Engineering, so I apologize if something is wrong. There is a free program that requires a license key, which can no longer be bought and obtained. I'm trying to write a KeyGen or ...
wh1tedance's user avatar
4 votes
1 answer
222 views

Debug problem with Ghidra 3rd party language

I want to reverse engineer some 65816 code using Ghidra. Unfortunately the third-party 65816 language is broken. No problem, I can fix it myself. However, looking at the Ghidra error gives me no clue ...
Robin Elvin's user avatar
3 votes
0 answers
92 views

Java Byte Code Debugger

I'm trying to reverse a highly obfuscated program written in java. None of the deobfuscators seem to work so I have been poking at it in eclipse. I can attach to a running process and have figured ...
MDK's user avatar
  • 131
2 votes
0 answers
89 views

Java bytecode dynamic analysis

I've been trying to patch a certain functionality of a jar file, that's essentially a GUI app. I've tried numerous java agents -as it seems to be the only viable option for java- for such a task, ...
xquilt's user avatar
  • 21
3 votes
0 answers
223 views

How do I log a string in smali without its obfuscated function?

I'm reversing engineering an app and after analyzing with man-in-the-middle, I find that it obfuscates its messages to the server so it looks like a gibberish. String stc = ("msg=" + ...
r3verse3ngineer's user avatar
2 votes
0 answers
940 views

frida cant cast string array to java.lang.object

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); the last parameter is a string list casted to java.lang.object the way ...
ahmed mani's user avatar
2 votes
1 answer
234 views

Automatic deobfuscation of Java class/method/parameter names with access to old non obfuscated sources

I am currently trying to de-obfuscate a Java program (i.e. find each class name and namespace, each method name and each method parameter name). To do so, I started by using Enigma (the fork from ...
Adrien Suau's user avatar
1 vote
0 answers
145 views

Where can I find the hashing algorithm in source code?

When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following email & pass : "[email protected]:abc" it ...
Dino's user avatar
  • 11
1 vote
1 answer
206 views

How to set a breakpoint in android's openssl library in running android application?

I'm debugging an obfuscated android application. I use Android Studio's debugger. I attach it remotely to my physical device via adb. I can set a breakpoint in the app smali code, but when I try to ...
g00dds's user avatar
  • 113
0 votes
1 answer
1k views

frida returning wrong overload of android method

im trying to hook the C6494a method has 2 parameters the ge6 object and a activity object whenever i try to hook this method with a hook overload that contains both ge6 and the activity object frida ...
ahmed mani's user avatar
1 vote
0 answers
66 views

Mod Coder Pack for minecraft 1.8.8 failed to decompile

I tried to decompile minecraft 1.8.8 using MCP918 and I have an error that I cannot fix. Here are the logs: https://zerobin.net/?07c9671c16bc4011#g6co8FZc8RJkkQiPb6pu65HixcEORkWZGN8qHPXkHew= Some ...
Cristian's user avatar
2 votes
1 answer
1k views

[Ghidra]How to set global variable type?

I have created a script in Java and I have a structure type as a string name which I want to set at given global variable which I have the Address of. However I can't seem to find a way to do this - ...
rec's user avatar
  • 475
1 vote
1 answer
79 views

How to utilize `FillOutStructureCmd`?

Basically I'm extending the CreateStructure.java plugin so it iterates all functions and tries to automatically create structures on all variables. It looks something like this: public class ...
rec's user avatar
  • 475
2 votes
0 answers
375 views

Where can I find the encryption algorithm for this POST request in an Android APP?

I have an Android app for which I need to mock an API call outside of that environment. I successfully killed the certificate pinning on this app with Frida in order to access the URL and more, but ...
Miguel's user avatar
  • 29
0 votes
1 answer
530 views

Decompile obfuscated jar file

Tried java-deobfuscator and other things, detect said it was allatori protected so tried the relevant transformers but to no avail. Please can someone help, I'm happy to tip for your help :) https://...
Hanbury Barry's user avatar
1 vote
1 answer
1k views

Where can I find the encryption algorithm in source code?

When I submit a Customer Reference ID in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following CR ID : "SR-54585482" it POSTs the ...
Cruzer Blade's user avatar
0 votes
1 answer
345 views

SQLite access from Ghidra script

I would like to access an SQLite database from within a Java Ghidra script. However, if I include the line import java.sql.*; in the script, Ghidra gives the error > Unable to locate script class:. ...
HaLailah HaZeh's user avatar
0 votes
0 answers
221 views

What is this CRC32 algorithm (written in C), and how can it be written in Java or Python?

I've been trying to convert this CRC32 algorithm to Java or Python, but I haven't been successful, I believe it's because I'm not familiar enough with c. Note that I believe DAT_804818d0 is the seed, ...
Gamebuster19901's user avatar
5 votes
0 answers
529 views

Patching Jar File (2022)

Currently reversing a .jar program recreationally, and I understand the workflow proposed here: https://www.netspi.com/blog/technical/thick-application-penetration-testing/patching-java-executables-...
triboulet's user avatar
4 votes
1 answer
439 views

Determine if exe is written using Java

I'm examining my Windows programs to determine which ones are written in Java, and if so, whether they import a log4j library affected by the log4shell vulnerability. Programs that are packaged as JAR ...
Trent Gm's user avatar
  • 141
0 votes
1 answer
826 views

Ghidra: Iterating over function's codeUnits returns only 1st instruction

public void run() throws Exception { var cp = currentProgram; var nsSymbols = ghidra.app.util.NamespaceUtils.getSymbols("myNameSpace", cp); var glNS = nsSymbols.get(0)...
KreonZZ's user avatar
  • 131
0 votes
0 answers
541 views

How to deobfuscate Java application

Hi i am unable to deobfuscate the Advanced String Obfuscation Jar on tryHackMe I tried dumping the classes using a dumper javaagent deobfuscate the jar with java-deobfuscator threadtear functions ...
altsphaantm's user avatar
1 vote
1 answer
140 views

Java Malware Dollar Sign

I am analyzing a mobile malware sample and got a trouble. When i put sample in JADX, i see some dollar sign. I mean like this; What does these dollar signs means?
Fatih YILMAZ's user avatar
1 vote
0 answers
43 views

Capturing created and deleted files from a Java file

I am new to the malware analysis field but I do have an issue, a file I am working on creates 2 vbs files, reads from them and deletes them, this all happens in around 2 seconds. Also this is a Java ...
Tyler Edmonds's user avatar
0 votes
0 answers
293 views

Checksum verification of an apk does not the same as my java program

I'm from the sysadmin side of the IT and have not much experience in programing. I have an app that lets me screen share Android apps on my car's display. Sadly there is a whitelist baked into the app,...
Simon Sutter's user avatar
1 vote
0 answers
123 views

Is this native code possible for further static analysis?

I was trying to reverse engineer a native lib code in an android app. the .so contains many functions. But the function sUQWWyTBEs() was referred in the Java code. I was curious how this function ...
hanan's user avatar
  • 309
-1 votes
1 answer
173 views

what do these assembly code doing?

I tried to reverse engineer an apk app, and it was loading a native code. I have observed that the app was using the native code like this public static String v = sUQWWyTBEs().toString().substring(32,...
hanan's user avatar
  • 309
1 vote
0 answers
219 views

What tools can be appropriate to reverse engineer a (open-source) java program?

I am very new reverse engineering, and have the below mentioned tasks to achieve on a open source program called Apache Ant. What (preferably free) tools can be appropriate to achieve these. I have ...
Bilal Mirza's user avatar
0 votes
0 answers
141 views

How do I decode or decompile this class It seems codes are encrypted?

I've used JD-Gui, Luyten and other couple of Java Decompilers but it's not working what is the problem in here? Thanks! It's A Mod (Minecraft) and I'm porting into different versions. Code: public ...
PoppyDude's user avatar
2 votes
1 answer
2k views

How to decompile heavily obfuscated classes mixed with Arabic/Chinese/Korean characters?

I recently downloaded a jar file and was curious to see if it was malicious, so I ran it through FernFlower and it wasn't able to deobfuscate it. When I unzipped the jar, I looked inside it and saw ...
reversesigmathx's user avatar
1 vote
1 answer
251 views

Java Help Understanding RSA Encrypt/Decrypt file and SD card

I was directed this way from the main superuser site: I have zero experience with Java or Android apps (I have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
Dan Lewis's user avatar
3 votes
2 answers
2k views

Frida reading files is slow

I need to read a file around 2 MB into a byte array. var fis = Java.use("java.io.FileInputStream"); var file = fis.$new("/data/local/file.txt"); var fileBytes = new Uint8Array(file....
Cagri's user avatar
  • 176
2 votes
1 answer
784 views

Making a Android Toast via JNI, i.e. calling Java methods via JNI

Concerning the outputting of an Toast, I found that there are some ways to make a Toast, that invoke calling a FindClass on JNIEnv object with the android/widget/Toast parameter, but I found no ...
Timotej Leginus's user avatar
1 vote
0 answers
1k views

Tracing all (or most of) function calls in a specific Android app

I'm having a problem, where I'm trying to trace some function calls in an Android app, that uses JNI for about all of its work. More specifically, a function call, in JNI, that makes (IIRC Android ...
Timotej Leginus's user avatar
1 vote
1 answer
1k views

How can I see when a library is being called in Android?

Apologies for a beginner-esque question, but I am reverse engineering an Android application, that is most probably using the libusbhost.so library to interface with USB devices via Java Native ...
Timotej Leginus's user avatar
0 votes
1 answer
3k views

Recaf: Recompile disabled, can't edit

I've download recaf jar file and install JDK 8. When I execute it/start it, it all works fine with java -jar recaf-2.12.0-J8-jar-with-dependencies.jar. I open a class file also no problem. The issue ...
Marco Fernandes's user avatar
2 votes
0 answers
38 views

How can I tell whether or not a given library method is being referenced by a consumer program statically in OOP languages?

Preface: This question is about source code reverse engineering and static analysis. Meaning, there is no built code available but I have access to the source code of the program. Imagine I'm looking ...
the_endian's user avatar
  • 1,860
-2 votes
1 answer
429 views

How to deobfuscate Java application protected by Java Antidecompiler [closed]

Here is some infomation I found from MANIFEST.MF Archiver-Version: Plexus Archiver Built-By: boonb Created-By: Apache Maven Build-Jdk: 1.8.0_231 Main-Class: JavaLauncher Modified-By: 9.4 (BIS Guard &...
vulongc3's user avatar
1 vote
1 answer
347 views

Accessing Call String of CALLOTHER Pcode Instruction via Java API?

Is there a way to access the call string of a CALLOTHER Pcode instruction when iterating over the Pcode in Java? The listing below shows an example of what I mean: 048 ...
Melvin's user avatar
  • 113
2 votes
1 answer
1k views

How do we decompile java so easy?

I have seen a lot of videos where everyone is decompiling the jar files so easily. but I learnt that we cannot decompile any compiled file so easily. I have a little bit of experience in Gidhra. I ...
lucky thandel's user avatar
1 vote
1 answer
522 views

frida - The specified child already has a parent. You must call removeView() on the child's parent first when hooking, how do you solve it?

I wanted to hook the method A1f in the below code but frida returns the following exceptions: Found instance: MyHomeFragment{9bbd8d5} (0965bca9-4838-4ca1-a835-d99639ae15f1)} java.lang....
hanan's user avatar
  • 309