Questions tagged [java]

Java is an object-oriented language and runtime environment (JRE). Java programs are platform independent, because they are compiled to bytecode and their execution is handled by a Virtual Machine called the Java VM or JVM.

Filter by
Sorted by
Tagged with
2 votes
1 answer
4k views

How do I Log a String Referenced within a Method - Smali

I have been trying to reverse engineer an Android application and was wondering how I would go about logging a certain string. Here is the method I am trying to log the String from: .method private ...
user avatar
2 votes
1 answer
132 views

Disassembled Java class file differs from Source

While trying to understand a behavior of TestNG I found my self disassembling the .class files. During that, I accidentally noticed that the official binary differs from the one built manually from ...
user avatar
1 vote
1 answer
4k views

Anti-tampering techniques in Android APK's

I'm reverse engineering an Android app, and it has some kind of anti-tamper protection. The problem is that I can't find it anywhere in the smali files. Even if I just re-sign the official APK that I ...
user avatar
0 votes
1 answer
658 views

Decode Ascii string values from reverse-engineered lua file

I decompiled a lua file with unluac and it turns out all the string variables are not readable and are instead ascii encoded clues = { { answer = { "\216\173", "\216\177", "\...
user avatar
1 vote
2 answers
3k views

Renaming entitites in obfuscated java bytecode

I'm working with an SDK for developing apps that's distributed as an AAR, and has been obfuscated with ProGuard. I'm just trying to reverse a few things it does. The classes, methods and variables ...
user avatar
  • 124
3 votes
3 answers
8k views

Extracting classes from running JVM

I'm trying to RE a Java application that uses an obfuscated loader program to load classes from a second, obfuscated archive-like file. I'm trying to get at these loaded classes for further analysis, ...
user avatar
-2 votes
1 answer
4k views

Reverse-obfuscated Java code [duplicate]

Any idea how to reverse obfuscated java code !?
user avatar
1 vote
1 answer
297 views

Going around finding a signature used in a .APK file

So I've decompiled an APK and I believe that I have now is the source code (most with a bunch of random variables and method names, but from what I've read this is completely normal) the app in ...
user avatar
  • 11
2 votes
1 answer
8k views

Frida manipulating arguments - Android

I've attempting to learn how to use Frida to instrument android app, just for person interest. So far I've managed to get my environment set up with a physical android tablet and I can successfully ...
user avatar
  • 31
1 vote
1 answer
223 views

Certain classes do not show up in JDB while they are present in source code

I'm debugging a closed-source Android app with jdb. In the output produced by the apktool, I see class com.myapp.j.d.d, as well as a/b/c/e, but at run-time, I see only com.myapp.j.d.e. Why is that ...
user avatar
1 vote
0 answers
213 views

rebuilding a java application

I wish to rebuild MotiveWave, a charting tool, from its jars. This application has a feature (probably in one of the class files but I don't know which) that i want to build upon. I mean I want to ...
user avatar
0 votes
1 answer
2k views

Reversed APK crashes after install

I'm trying to reverse an apk, overload some function and rebuild/sign it. I should have done everything in the correct way; the only thing I edited is a function that check if the device is rooted. ...
user avatar
0 votes
1 answer
934 views

What's the most straightforward way to change a simple thing in Android APK java application?

I need to make some simple tweaks to Android APP that keeps crashing. Viewing the code and seeing possible problems is pretty simple. I can either: Use Apktool (eg. apktool d name_of_apk.apk -o ...
user avatar
5 votes
2 answers
9k views

Mapping Android resource IDs to resource string

I'm trying to reverse engineer an Android app. I've tried using several decompilers, and while I'm getting java source codes to varying levels of accuracy, I'm not able to convert the resource IDs to ...
user avatar
1 vote
1 answer
2k views

Decompiled Java classes span multiple files

I've been playing around with decompiling Android apps from dex/jar files to java source code, with varying success. I've tried the usual suspects - JD-GUI, procyon, cfr, krakatau and jadx. I'm having ...
user avatar
6 votes
2 answers
2k views

Trace system calls, including stack (and java stack if possible), on android?

I have an android app that reads/writes a data file which seems to be encrypted, and i want to make a tool to read/write that file, so i need to reverse the encryption. The app in question consists ...
user avatar
10 votes
2 answers
2k views

Java byte code equivalent of IDA function signatures

I remember IDA (Interactive Disassembler) has a really neat feature of function signatures where you don't have to reverse engineer code found inside standard libraries. Is there a similar feature for ...
user avatar
  • 123
2 votes
1 answer
2k views

Any good deobfuscators for java?

So I've built an obfuscator for java source code, would anyone know if there is any good deobfuscators which i could test how well my obfuscator is? I know there are many deobfuscators out there, ...
user avatar
1 vote
0 answers
72 views

Java source code deobfuscator? [duplicate]

Does anyone know of any source code deobfuscator in java? I'm currently writing an obfuscator for java source code and I want to test how well I have made it with an deobfuscator.
user avatar
1 vote
1 answer
150 views

Discrepancies in function declarations from decompilers?

An Android application I'm analyzing makes calls to a native library to generate a certain value. Here's an example of the native library function declaration from SMALI (Decompiled Java): .method ...
user avatar
  • 195
2 votes
2 answers
2k views

Java - Decipher encrypted classes in a jar file

I have a couple of classes that are encrypted. The class loader must decrypt these before executing in the JVM. The question is, how and where? What can I do to understand who is responsible to ...
user avatar
  • 199
0 votes
1 answer
2k views

Extracting a .DAT file

I want to extract a chunk of text available in an android app. I disassembled the APK and found a .DAT file which seems to carry the text I'm looking for (the file was inside the directory res/raw/). ...
user avatar
  • 11
1 vote
1 answer
512 views

javap is not displaying an expected method

I'm trying to write a custom signature for a java tool called "findbugs." The specific example I'm looking to detect are instances where a static, non-concurrent hashmap is instantiated. In a multi-...
user avatar
  • 590
2 votes
0 answers
451 views

Jar reversing: Can't open as zip file nor open it with common decompilers

I'm pentesting a JNLP application composed by several .jar files. I'm able to decompile with jd-gui every 3rd party library included in it, but the main .jar coded by my client. So after running JD-...
user avatar
  • 21
1 vote
1 answer
916 views

Decrypt SSL/TLS traffic from a Java web applet

I am trying to reverse engineer the protocol of a chat written in java to implement my own client. The official client is a java applet embedded in the website so I thought it might use just https but ...
user avatar
2 votes
0 answers
204 views

Javascript equivalent of JEB

In case you already know, there is a full-feature decompiler for Java/Android called JEB (https://www.pnfsoftware.com/) Some of the most important features include the ability to rename identifiers ...
user avatar
  • 257
4 votes
2 answers
9k views

Workflow patching Java jar file

Normally I'm working with firmwares and native code executables, patching small things like constants, jump conditions etc. There I'm using IDA's disassembly to analyse what and where to patch. With ...
user avatar
2 votes
1 answer
673 views

Correct reassembly of Java bytecode

I've been reverse engineering the Yikyak application, and I came across this function One particular function is used in order to verify the integrity of the API call. The decompiler failed to figure ...
user avatar
0 votes
2 answers
1k views

Obfuscating jar already obfuscated [closed]

I'm wondering what happens if we try to run a jar through Proguard that has already been obfuscated by another obfuscator or Proguard itself? Will the obfuscated class names and methods names be ...
user avatar
  • 257
1 vote
1 answer
281 views

cost, time and tools had Google reverse-engineered Java packages? [closed]

In the context of Oracle vs. Google: This is not a case where Google reverse-engineered Oracle’s Java packages to gain access to unprotected functional elements contained therein. page 48 ...
user avatar
  • 119
3 votes
0 answers
589 views

Hooking the BootClassLoader [closed]

According to Wikipedia, there are 3 class loaders. The Boot Class-Loader which loads everything in RT.jar and /../jre/lib Then the extensions class loader and the system class loader. I'm only ...
user avatar
12 votes
2 answers
8k views

Java .class bytecode debugger

What is the good Java debugger for .class files, if no source code available? jdb is seems pretty weak :( I don't need to decompile .class, but I want to debug bytecode.
user avatar
  • 123
2 votes
3 answers
3k views

Syntax errors when decompiling with JD-GUI

I am aware that when decompiling a jar file, it is normal for the resulting .java files to contain syntax errors, but I am unsure of why and worse off I am sometimes unsure of how to fix these syntax ...
user avatar
0 votes
2 answers
797 views

Detecting weaknesses/vulnerabilities (in games). Scientific papers/Tutorials?

I am a student of informatics with additional games engineering. I currently have a project about Reverse Code Engineering. Mainly my task is to gather information about the topic "Detecting ...
user avatar
1 vote
1 answer
2k views

R.java to xml file

How does R.java work? In a compiled .apk file, does it contain all constants from the XML files prior to compilation? I've decompiled an app using several Java RE tools, and used apktool to extract ...
user avatar
  • 257
1 vote
1 answer
251 views

Recover architecture. Open source application [closed]

I am attempting to recover the architecture for an open source application (Written in Java). Obviously I have looked at the available documentation but it has not given me the detail that I need to ...
user avatar
1 vote
0 answers
94 views

Accessing debug log on Java application

I'm currently reverse engineering a JSP applet running through JBoss. Decompiling the code it looks like there are a bunch of Logger.debug() calls in the code that aren't guarded. A quick read through ...
user avatar
  • 972
3 votes
1 answer
284 views

What is the problem with using inner classes in a class enclosing sensitive information?

I recently heard that using Java inner classes in a class that enclose sensitive information is causing the private data of the class to be changed to protected at the bytecode level (meaning that any ...
user avatar
  • 18.1k
1 vote
2 answers
518 views

exploit - Getting started with Java exploitation [duplicate]

I am looking to get started with Java exploitation. I have not found a good place start or even how to start, so I am asking here. What are the publicly available exploits for Java that one can study ?...
user avatar
  • 203
-1 votes
1 answer
119 views

How to "follow"Java software executing

I am facing with a software made in Java. This program is a group of jar called in a flow after the first startup.jar There is a way or method to follow executing and know which class is currently ...
user avatar
  • 199
7 votes
2 answers
6k views

GUI for transforming Java Bytecode based on decompiled source?

Okay. So I've just come up with the most amazing program for java developers and reverse-engineerers and I was wondering if something like the following program already exists: What I'm thinking of ...
user avatar
  • 173
3 votes
1 answer
1k views

Modified Java byte-code, no difference runtime

I modified the byte-code of a third party Java desktop application's .class file (and repacked the .jar), only to see that during runtime, my change made no difference, unless my change caused a crash ...
user avatar
  • 33
8 votes
2 answers
6k views

Hooking Java APIs

In native code on windows functions can be hooked by replacing their prologue with a JMP instruction. Is there a way to do something similar with an application written in java? In the end I want to ...
user avatar
  • 1,160
1 vote
2 answers
180 views

How to find the version number of Android Ad libraries from reverse engineered apps?

I am analysing Android ad libraries. I have downloaded apps from Google play and used dex2jar and JDGUI to recover the Java code of the app. As expected a lot of apps use ad libraries (such ad Google ...
user avatar
2 votes
2 answers
1k views

Reversing Engineering ZKM

So I am attempting to reverse engineer a jar obfuscated with Zelix Klass-Master. I have been using JMD, although it crashes whenever it attempts to crack the bytecode, saying "Could not locate control ...
user avatar
2 votes
4 answers
935 views

Reverse engineering close sourced JSP applets

I have a web application written in JSP running on a tomcat 6 server that I want to RE. I've decompiled the .jars associated with the web application. The source code is heavily obfuscated, making it ...
user avatar
2 votes
1 answer
5k views

difference between two .class files

Could you tell me how to detect difference between (same) .class files? I have a java class compilated with Maven2 on my local computer => works good! I jave the same java class compilated with ...
user avatar
2 votes
1 answer
582 views

VerifyError after editingg class file with dirtJOE

I'm using dirtyJOE to edit a method of a class file. The original class file had some encryption method calls and such. I've changed the byte-code of the method ldc (byte-code: 12 1E) to load true ...
user avatar
  • 383
3 votes
1 answer
2k views

Rename classes and packages in a jar file

I have an obfuscated jar file I'm trying to decompile and get into an eclipse project. I can easily view the "source" using a tool like jd-gui but I cant save it because the filenames are too long. I ...
user avatar
  • 31
1 vote
2 answers
926 views

Patch a Java class inside a jar using C# [closed]

Being a beginner in C# I wonder if it is possible to patch a .class file inside a .jar? Since jar files tend to act like "zip" files, the approach I think might work is to decompress the jar, patch ...
user avatar