Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [shared-object]

The tag has no usage guidance.

0
votes
0answers
106 views

How do I obtain database key in IDA pro/Hex RAYS from decompiled .SO lib?

I'm new to reverse engineering and I found a .SO library inside an android app. I wanted to reverse engineer it to find the key used to encrypt the local database that the game uses for characters. ...
4
votes
1answer
57 views

What does a C++ identifier ending in $_## mean?

In trying to understand a .so from an Android game made with Cocos2d-x, I've come across identifiers like the following (after demangling): SceneActionMap::updateTalkMode(float)::$_37 SceneActionMap::...
2
votes
1answer
2k views

Inject code into JNI function (Android shared library)

An android app loads a native library (.so) using System.loadLibrary. It then calls a specific function, which takes 3 input variables, and returns a string containing a MD5 hash. You can see the ...
1
vote
1answer
59 views

HighWaterNumberOfObjects/Handles meaning?

I've been looking at some kernel debugging and came to see this: 0: kd> dt nt!_OBJECT_TYPE ffffd0851aad6c90 +0x000 TypeList : _LIST_ENTRY [ 0xffffd085`1aad6c90 - 0xffffd085`1aad6c90 ] ...
1
vote
1answer
257 views

JNI_onLoad not presented in .so (Android)

I'm trying to analyze a .so file that is ran on android. Loading the file into IDA I'm unable to spot the JNI_onLoad. So I dumped the .so to memory and I'm still unable to spot the JNI_onLoad. ...
0
votes
1answer
752 views

Need help reversing an Android Game

I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
0
votes
2answers
507 views

How can I debug android native library with ida demo?

I am trying to debug android native library using ida demo version everything otherthing is working except some one I can't find android_server file for keeping on android device and can't see the ...
0
votes
2answers
2k views

How to dump Android shared library from memory?

I have encrypted Android so library that decrypts itself on load. I want to get its unencrypted code. For me it looks good idea to dump that library from memory when application started. I used /proc/...
3
votes
1answer
654 views

Attach Shared Object to android process with IDA

I am: working with an Android game, using an Android Emulator, and trying to attach an android .so library to a process. I have the whole IDA server set up, I can attach to processes when a classes....
0
votes
1answer
91 views

how Can I use a linux so file from a program other than the program it was developed for?

I wish to use the codecs that come with realplayer but without needing realplayer. The codecs I want to use are all in .so format, but I don't know how to separate the codecs from the rest of ...
1
vote
0answers
133 views

Add debugging symbols to objdump -d

I have a shared object (from a Debian package) and its debug library (from the associated debug package). If I disassemble the SO with objdump -d I only see (what I believe to be) the exported symbols....
1
vote
1answer
2k views

Breakpoint to debug Android Native Shared Library

I'm trying to solve FLARE-on 2015 challenge #06 (http://www.flare-on.com/files/2015_FLAREOn_Challenges.zip) using a dynamic analysis approach. It's an Android APK that loads a shared library (...
2
votes
1answer
1k views

Finding the library an imported function is from in IDA

I'm fairly new to reversing, and I have even less experience with IDA Pro. I am wondering if there is a way to figure out from where an imported function is imported, i.e. a memory location I can find ...
0
votes
1answer
111 views

Finding “free” inside libc.so

I extracted the libc.so.6 from within a vulnerable image used for exploitation purposes. I open up the shared object in IDA and I look at the symbols inside the "Exports" tab. I find "free"; upon ...