Skip to main content

Questions tagged [java]

Java is an object-oriented language and runtime environment (JRE). Java programs are platform independent, because they are compiled to bytecode and their execution is handled by a Virtual Machine called the Java VM or JVM.

44 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
0 answers
554 views

Patching Jar File (2022)

Currently reversing a .jar program recreationally, and I understand the workflow proposed here: https://www.netspi.com/blog/technical/thick-application-penetration-testing/patching-java-executables-...
triboulet's user avatar
3 votes
0 answers
97 views

Java Byte Code Debugger

I'm trying to reverse a highly obfuscated program written in java. None of the deobfuscators seem to work so I have been poking at it in eclipse. I can attach to a running process and have figured ...
MDK's user avatar
  • 131
3 votes
0 answers
236 views

How do I log a string in smali without its obfuscated function?

I'm reversing engineering an app and after analyzing with man-in-the-middle, I find that it obfuscates its messages to the server so it looks like a gibberish. String stc = ("msg=" + ...
r3verse3ngineer's user avatar
2 votes
0 answers
97 views

Java bytecode dynamic analysis

I've been trying to patch a certain functionality of a jar file, that's essentially a GUI app. I've tried numerous java agents -as it seems to be the only viable option for java- for such a task, ...
kqvanity's user avatar
2 votes
0 answers
974 views

frida cant cast string array to java.lang.object

i have a java method i am trying to call manually public static native Object a(int i, int i2, long j, String str, Object obj); the last parameter is a string list casted to java.lang.object the way ...
ahmed mani's user avatar
2 votes
0 answers
392 views

Where can I find the encryption algorithm for this POST request in an Android APP?

I have an Android app for which I need to mock an API call outside of that environment. I successfully killed the certificate pinning on this app with Frida in order to access the URL and more, but ...
Miguel's user avatar
  • 29
2 votes
0 answers
41 views

How can I tell whether or not a given library method is being referenced by a consumer program statically in OOP languages?

Preface: This question is about source code reverse engineering and static analysis. Meaning, there is no built code available but I have access to the source code of the program. Imagine I'm looking ...
the_endian's user avatar
  • 1,880
2 votes
0 answers
334 views

Google Maps, Android serialisation format

I've come across an SQLite database (gmm_storage.db) used by Google Maps on Android, and I'm unsure as to how the data it contains is serialised. For example: I'm saying serialised, as from the ...
Tony's user avatar
  • 133
2 votes
0 answers
207 views

How to reverse a java thread to get its origin

I was working on a java application which is run for the first couple of minutes & then application interface hangs. I had open the application in JMC & it shows later I create a thread dump ...
sks15's user avatar
  • 63
2 votes
0 answers
508 views

Jar reversing: Can't open as zip file nor open it with common decompilers

I'm pentesting a JNLP application composed by several .jar files. I'm able to decompile with jd-gui every 3rd party library included in it, but the main .jar coded by my client. So after running JD-...
Igarr's user avatar
  • 21
2 votes
0 answers
223 views

Javascript equivalent of JEB

In case you already know, there is a full-feature decompiler for Java/Android called JEB (https://www.pnfsoftware.com/) Some of the most important features include the ability to rename identifiers ...
Nederealm's user avatar
  • 277
1 vote
1 answer
47 views

How to find what are all the third party apps used in an android app manually by decompiling an apk

How to find all the Third Party Libraries (TPLs) used in an android app after de-compiling apk using jadx? I have looked at this answer but this is too vague. I can use tools such as Libradar etc. but ...
Vamsi's user avatar
  • 11
1 vote
1 answer
53 views

Get the jar from exe4j executable

I've read this question and it is not a duplicate to mine. I have a .exe file which has different contents inside when opened with 7zip. However let's say I know that it uses EXE4J, how can I ...
Grinding For Reputation's user avatar
1 vote
0 answers
126 views

Frida: how to hook a synthetic class

When reverse engineering an APK I came across a class that was marked synthetic. I have used JADX decompiler. The simplified result I got was: package com; public final class zz6 extends B implements ...
Sven Onderbeke's user avatar
1 vote
0 answers
149 views

Where can I find the hashing algorithm in source code?

When I submit login credentials in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following email & pass : "[email protected]:abc" it ...
Dino's user avatar
  • 11
1 vote
0 answers
69 views

Mod Coder Pack for minecraft 1.8.8 failed to decompile

I tried to decompile minecraft 1.8.8 using MCP918 and I have an error that I cannot fix. Here are the logs: https://zerobin.net/?07c9671c16bc4011#g6co8FZc8RJkkQiPb6pu65HixcEORkWZGN8qHPXkHew= Some ...
Cristian's user avatar
1 vote
0 answers
43 views

Capturing created and deleted files from a Java file

I am new to the malware analysis field but I do have an issue, a file I am working on creates 2 vbs files, reads from them and deletes them, this all happens in around 2 seconds. Also this is a Java ...
Tyler Edmonds's user avatar
1 vote
0 answers
125 views

Is this native code possible for further static analysis?

I was trying to reverse engineer a native lib code in an android app. the .so contains many functions. But the function sUQWWyTBEs() was referred in the Java code. I was curious how this function ...
hanan's user avatar
  • 309
1 vote
0 answers
223 views

What tools can be appropriate to reverse engineer a (open-source) java program?

I am very new reverse engineering, and have the below mentioned tasks to achieve on a open source program called Apache Ant. What (preferably free) tools can be appropriate to achieve these. I have ...
Bilal Mirza's user avatar
1 vote
0 answers
2k views

Tracing all (or most of) function calls in a specific Android app

I'm having a problem, where I'm trying to trace some function calls in an Android app, that uses JNI for about all of its work. More specifically, a function call, in JNI, that makes (IIRC Android ...
Timotej Leginus's user avatar
1 vote
0 answers
191 views

JEB Decompiler - Signature recognition engine

I've been playing around with the JEB decompiler and Android reverse engineering suite. One interesting feature they have is deobfuscation by library code matching in which 3rd party libraries out ...
Nederealm's user avatar
  • 277
1 vote
0 answers
790 views

Some obstacles in reversing a JNI Native library

I deleted my last question (it was not still answered and none's effort was wasted) as I got back and thought to re-read JNI documentation, to find I misinterpreted some bits. Things are now clearer ...
CortexAuth's user avatar
1 vote
0 answers
2k views

Obfuscated Config Files: EHI Files for HTTP Injector

So I have an ehi file, which is a configuration file for an Android App called HTTP Injector. Of course when I try to see it as a simple text, I just get random characters. What tool could I use to ...
Lucas's user avatar
  • 11
1 vote
0 answers
577 views

Calling functions of a shared object (.so) extracted from an APK

Decompiling a regular Android application I noticed that its code uses some native functions. So, unpacking the (.apk) file I found the usual "lib" folder and under that a series of folders for ...
Dadex's user avatar
  • 11
1 vote
0 answers
1k views

decompiled android application with only one class [DexProtector]

I'm trying to reverse engineering an android app and it's mostly for an experiment but I have a problem that I can't find a solution or even what is the problem. I decompiled an app with JADX-gui and ...
Amin's user avatar
  • 71
1 vote
0 answers
266 views

Common practices for 'hiding' a class within an Android application?

I've recently gotten into Android reverse engineering, and I've been messing around with some apps lately for education/research purposes to see how some things are done with private (mobile) APIs. ...
codsane's user avatar
  • 11
1 vote
0 answers
255 views

Intercept traffic from exe to my Java server

In Windows 10, I can easily intercept traffic of an application using Proxifier and route it to Charles proxy, so that I can inspect and edit the data. exe -> Proxifier (Socks proxy to localhost:...
Saturnix's user avatar
  • 151
1 vote
0 answers
180 views

Is there any way to get value from bytecode under JDWP without access to source?

When I debug android app through jdwp using jdb, it seems I can't get anything from the bytecode level. I know normally it's fine as long as we have the source line info and use a decompiler, but the ...
Y M's user avatar
  • 118
1 vote
0 answers
560 views

Java Bytecode edit

Hi, I would like to edit one compiled java class file & like to insert & edit a couple of lines. I'm trying to make a patch for a software & when I compare this two file the only change I ...
sks15's user avatar
  • 63
1 vote
0 answers
227 views

rebuilding a java application

I wish to rebuild MotiveWave, a charting tool, from its jars. This application has a feature (probably in one of the class files but I don't know which) that i want to build upon. I mean I want to ...
waverider123's user avatar
1 vote
0 answers
102 views

Accessing debug log on Java application

I'm currently reverse engineering a JSP applet running through JBoss. Decompiling the code it looks like there are a bunch of Logger.debug() calls in the code that aren't guarded. A quick read through ...
Fewmitz's user avatar
  • 1,022
1 vote
1 answer
532 views

frida - The specified child already has a parent. You must call removeView() on the child's parent first when hooking, how do you solve it?

I wanted to hook the method A1f in the below code but frida returns the following exceptions: Found instance: MyHomeFragment{9bbd8d5} (0965bca9-4838-4ca1-a835-d99639ae15f1)} java.lang....
hanan's user avatar
  • 309
1 vote
1 answer
276 views

Certain classes do not show up in JDB while they are present in source code

I'm debugging a closed-source Android app with jdb. In the output produced by the apktool, I see class com.myapp.j.d.d, as well as a/b/c/e, but at run-time, I see only com.myapp.j.d.e. Why is that ...
assp1r1n3's user avatar
0 votes
0 answers
39 views

Stuck on trying to understanding local TCP communication for a smart home app

I am trying to write a Home Assistant integration to control smart lights and other smart devices from a certain manufacturer locally (it is a local manufacturer who have their own app which is not ...
Mazemeshane's user avatar
0 votes
0 answers
65 views

Make a reverse engineering for dead app

Hi,there is an app (Voip Recorder & Screen Recorder)the developer stopped updating the app from 3 years, and it's the only app in the world could record the screen with internal sound likes ...
AWS NEBRAS's user avatar
0 votes
0 answers
40 views

how to set a BP on button in SunAwtCanvas in x96dbg

I'm trying to debug a program in x96dbg that I think this is written in Matlab. There is no string related to buttons or something interesting. Then I go to Handles tab to find buttons and set break ...
owl's user avatar
  • 1
0 votes
0 answers
541 views

How does the Easy Victory cheat get data from another app in real time?

Easy Victory was developed in Java for Android I was very curious about how Easy Victory takes data from the game's balls and billiard cue force/velocity to calculate trajectories This is not a mod ...
Jonathan Silva's user avatar
0 votes
0 answers
173 views

How can I find which JNI library implements a java native method at runtime for Android applications?

I am doing security research, my target application includes some JNI libraries which implements some native java methods I am interested in. This app is obfuscated, I can't directly find the library ...
hldev's user avatar
  • 101
0 votes
0 answers
224 views

What is this CRC32 algorithm (written in C), and how can it be written in Java or Python?

I've been trying to convert this CRC32 algorithm to Java or Python, but I haven't been successful, I believe it's because I'm not familiar enough with c. Note that I believe DAT_804818d0 is the seed, ...
Gamebuster19901's user avatar
0 votes
0 answers
561 views

How to deobfuscate Java application

Hi i am unable to deobfuscate the Advanced String Obfuscation Jar on tryHackMe I tried dumping the classes using a dumper javaagent deobfuscate the jar with java-deobfuscator threadtear functions ...
altsphaantm's user avatar
0 votes
0 answers
303 views

Checksum verification of an apk does not the same as my java program

I'm from the sysadmin side of the IT and have not much experience in programing. I have an app that lets me screen share Android apps on my car's display. Sadly there is a whitelist baked into the app,...
Simon Sutter's user avatar
0 votes
0 answers
142 views

How do I decode or decompile this class It seems codes are encrypted?

I've used JD-Gui, Luyten and other couple of Java Decompilers but it's not working what is the problem in here? Thanks! It's A Mod (Minecraft) and I'm porting into different versions. Code: public ...
PoppyDude's user avatar
0 votes
0 answers
155 views

Hashing algorithm of length 50

I have been trying to reverse-engineer an Android application using Jadx for static analysis and Frida for dynamic analysis. The end goal is to be able to re-create the request signature, sent as a "x-...
Kévin's user avatar
  • 33
0 votes
1 answer
204 views

decomplied apk with bad parameters

I'm trying to reverse engineering an android app API so this is what I tried: First the app was using Okhttp certificate pinning and I couldn't track the URLs with Charles then I tried this method ...
Amin's user avatar
  • 71