Questions tagged [java]

Java is an object-oriented language and runtime environment (JRE). Java programs are platform independent, because they are compiled to bytecode and their execution is handled by a Virtual Machine called the Java VM or JVM.

Filter by
Sorted by
Tagged with
1
vote
0answers
194 views

rebuilding a java application

I wish to rebuild MotiveWave, a charting tool, from its jars. This application has a feature (probably in one of the class files but I don't know which) that i want to build upon. I mean I want to ...
1
vote
0answers
68 views

Java source code deobfuscator? [duplicate]

Does anyone know of any source code deobfuscator in java? I'm currently writing an obfuscator for java source code and I want to test how well I have made it with an deobfuscator.
1
vote
1answer
476 views

javap is not displaying an expected method

I'm trying to write a custom signature for a java tool called "findbugs." The specific example I'm looking to detect are instances where a static, non-concurrent hashmap is instantiated. In a multi-...
1
vote
1answer
241 views

Recover architecture. Open source application [closed]

I am attempting to recover the architecture for an open source application (Written in Java). Obviously I have looked at the available documentation but it has not given me the detail that I need to ...
1
vote
0answers
82 views

Accessing debug log on Java application

I'm currently reverse engineering a JSP applet running through JBoss. Decompiling the code it looks like there are a bunch of Logger.debug() calls in the code that aren't guarded. A quick read through ...
1
vote
1answer
204 views

Certain classes do not show up in JDB while they are present in source code

I'm debugging a closed-source Android app with jdb. In the output produced by the apktool, I see class com.myapp.j.d.d, as well as a/b/c/e, but at run-time, I see only com.myapp.j.d.e. Why is that ...
0
votes
2answers
663 views

Detecting weaknesses/vulnerabilities (in games). Scientific papers/Tutorials?

I am a student of informatics with additional games engineering. I currently have a project about Reverse Code Engineering. Mainly my task is to gather information about the topic "Detecting ...
0
votes
1answer
670 views

Compute stack frames while edit java bytecode

I saw here edit java bytecode got error that when editing java bytecode with Krakatau ,it may happend to error on stack frames. The answer there offer to change Krakatau version to 50. If I only ...
0
votes
2answers
6k views

How do you deobfuscate Java classes? [closed]

What tools or methodology do you use to de-obfuscate Java classes? I know you can theoretically decompile, modify and recompile, but that's only you fully trust a Java decompiler (and none is ...
0
votes
1answer
67 views

What types are read from byte array?

I try to understand what data types are read from a byte array. These methods seem to follow a common pattern: public class Reader { static short readA(byte[] bytes, int i) { int s = ((((...
0
votes
1answer
739 views

How can I open id0, id1, nam, so, or til files?

I am attempting to reverse engineer the DYMO Connect app in order to learn how to print to a DYMO LabelWriter Wireless printer. However, the mobile driver for the printer is in several different ...
0
votes
1answer
68 views

Need help understanding “garbage” data in https request

I managed to overcome certificate pinning in an android application and I am now able to view all the HTTPS request in plain text. However, I came across this request that I still do not understand: ...
0
votes
2answers
446 views

Smali vs Decompilation for malware detection in apk files

When it comes to reversing apk files, I understand that are mainly 2 approaches. The first involves using a decompilation engine which will try to produce java files which are more readable but can be ...
0
votes
1answer
843 views

What's the most straightforward way to change a simple thing in Android APK java application?

I need to make some simple tweaks to Android APP that keeps crashing. Viewing the code and seeing possible problems is pretty simple. I can either: Use Apktool (eg. apktool d name_of_apk.apk -o ...
0
votes
2answers
1k views

Obfuscating jar already obfuscated [closed]

I'm wondering what happens if we try to run a jar through Proguard that has already been obfuscated by another obfuscator or Proguard itself? Will the obfuscated class names and methods names be ...
0
votes
1answer
2k views

Ghidra pseudocode to Java/C

I have this piece of code generated from Ghidra void __cdecl FUNCTION(uint *key,uint *text) { undefined uVar1; ushort uVar2; uint *puVar3; uint *puVar4; uint *puVar5; int iVar6; uint ...
0
votes
1answer
57 views

Java obfuscated methods and params

Try to decompile several classes from jar and found this public static final boolean \u2005\u200e; and if (\u2005\u200e) { final boolean \u2005\u200e = tEstPrOJEcTDEV7i.\u2005\u200e; } ...
0
votes
2answers
762 views

.exe file to .class, decompiled to .java, how to put back to .class?

I'm trying to reverse engineer a very complex .exe to alter its behavior. Ran JWScan that tells me it's been wrapped with Jar2Exe (which I also saw during debugging). Looking at the complex exe with ...
0
votes
1answer
682 views

Android Reverse Engineering Network Traffic Stack Trace

Lets say an Android application sends out a traffic out to the server and expects a Json Response Request: https://server:port/userid=user1&token=randomstring7345 We want to replicate the ...
0
votes
1answer
343 views

How add String.equals to java bytecode (Krakatau)

I use Krakatau to edit java code. class test{ public boolean Func2(String text) { if(text=="aaaaaa") return true; return false; } } When I compile it I get this java bytecode ....
0
votes
1answer
544 views

Decode Ascii string values from reverse-engineered lua file

I decompiled a lua file with unluac and it turns out all the string variables are not readable and are instead ascii encoded clues = { { answer = { "\216\173", "\216\177", "\...
0
votes
1answer
1k views

Reversed APK crashes after install

I'm trying to reverse an apk, overload some function and rebuild/sign it. I should have done everything in the correct way; the only thing I edited is a function that check if the device is rooted. ...
0
votes
1answer
2k views

Extracting a .DAT file

I want to extract a chunk of text available in an android app. I disassembled the APK and found a .DAT file which seems to carry the text I'm looking for (the file was inside the directory res/raw/). ...
0
votes
0answers
17 views

Java Software cleanroom implementation

I'm trying to make a cleanrooom implementation of a java written lib. What resources can I use for it. Only the official software docs? Or can I use what I get after i throw the lib into a java ide (...
0
votes
0answers
90 views

How do I decode or decompile this class It seems codes are encrypted?

I've used JD-Gui, Luyten and other couple of Java Decompilers but it's not working what is the problem in here? Thanks! It's A Mod (Minecraft) and I'm porting into different versions. Code: public ...
0
votes
1answer
51 views

Java Help Understanding RSA Encrypt/Decrypt file and SD card

I was directed tyhis way from the main superuser site: I have zero experience with Java or Android apps (have coding experience in C) and tried reverse engineering a [now defunct/unsupported] app ...
0
votes
0answers
20 views

“strings” command from *nix, but as a Java API?

Looking for the "strings" command from *nix, but as a Java API. Does such a library or JAR exist? I've automated calling the strings *nix command, but would like to explore reverse ...
0
votes
0answers
19 views

How can I find the native functions used by the Java Runtime Environment on Linux?

I am not usually a Java programmer, but I need to locate for example, which native functions (or APIs) are used in something like java.io.File.createNewFile() on Linux? Initially, I am thinking of 2 ...
0
votes
1answer
52 views

Making a Android Toast via JNI, i.e. calling Java methods via JNI

Concerning the outputting of an Toast, I found that there are some ways to make a Toast, that invoke calling a FindClass on JNIEnv object with the android/widget/Toast parameter, but I found no ...
0
votes
0answers
48 views

Tracing all (or most of) function calls in a specific Android app

I'm having a problem, where I'm trying to trace some function calls in an Android app, that uses JNI for about all of its work. More specifically, a function call, in JNI, that makes (IIRC Android ...
0
votes
0answers
40 views

App crashes upon launch after apktool d, apktool b without changing anything

I would like to modify some codes via apktool. However it crashes once I signed it and installed it. I have tried resigned it without using apktool. It works. So I am pretty sure that the app does ...
0
votes
1answer
276 views

Recaf: Recompile disabled, can't edit

I've download recaf jar file and install JDK 8. When I execute it/start it, it all works fine with java -jar recaf-2.12.0-J8-jar-with-dependencies.jar. I open a class file also no problem. The issue ...
0
votes
0answers
30 views

Get Unaffected and KilledByCall Registers from CompilerSpec using Ghidra's Java API

Is there a way to get the volatile and non-volatile registers from Ghidra's CompilerSpec? For instance, when I look into the ARM.cspec I get the following information: <unaffected> <register ...
0
votes
1answer
131 views

frida - The specified child already has a parent. You must call removeView() on the child's parent first when hooking, how do you solve it?

I wanted to hook the method A1f in the below code but frida returns the following exceptions: Found instance: MyHomeFragment{9bbd8d5} (0965bca9-4838-4ca1-a835-d99639ae15f1)} java.lang....
0
votes
0answers
52 views

Hashing algorithm of length 50

I have been trying to reverse-engineer an Android application using Jadx for static analysis and Frida for dynamic analysis. The end goal is to be able to re-create the request signature, sent as a "x-...
0
votes
2answers
95 views

Load Library Android

I Work as cybersecurity consultant and now i'am in mission to reverse engineering of mobile app. I always reverse it using Jadx and dex2jar ... the problem that after reverse them i found some native ...
0
votes
2answers
968 views

What functions (in which modules) can be hooked by Frida to access unencrypted data of SSL connections in Java programs running under Windows?

There are gazillions of internet resources discussing how to use Frida to hook and otherwise mess around with SSL connections of Java programs running under Android, but seemingly (as far as my google-...
-1
votes
2answers
55 views

How to view SDK files and is it mandatory to run modified apk on rooted device

I am performing reverse engineering on android apk using apktool. Is there any way I can view the code in SDK/NDK files ? if i make any change in the .smali files is it necessary to run the modified ...
-1
votes
1answer
622 views

[B symbol in java bytecode

I looking at java bytecode and understand almost everything. I saw the symbol [B on java bytecode. What does it mean?
-1
votes
1answer
96 views

decomplied apk with bad parameters

I'm trying to reverse engineering an android app API so this is what I tried: First the app was using Okhttp certificate pinning and I couldn't track the URLs with Charles then I tried this method ...
-1
votes
1answer
117 views

How to “follow”Java software executing

I am facing with a software made in Java. This program is a group of jar called in a flow after the first startup.jar There is a way or method to follow executing and know which class is currently ...
-2
votes
1answer
131 views

How to deobfuscate Java application protected by Java Antidecompiler [closed]

Here is some infomation I found from MANIFEST.MF Archiver-Version: Plexus Archiver Built-By: boonb Created-By: Apache Maven Build-Jdk: 1.8.0_231 Main-Class: JavaLauncher Modified-By: 9.4 (BIS Guard &...
-2
votes
1answer
3k views

Reverse-obfuscated Java code [duplicate]

Any idea how to reverse obfuscated java code !?
-3
votes
1answer
11k views

How to edit .asec file? [closed]

How to edit .asec or compare two .asec files witch are stored by app at location mnt/.android_souce/app name.asec. This file get updated whenever data connection is on / while using app to upload and ...
-3
votes
1answer
287 views

how to deobfuscate to java zkm?

I will have a question for you, dear forum residents. I have a .jar file encrypted with ZKM which I think will work for me. I don't know how to decrypt this, can you help me?

1 2
3