Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Inject script into Dex-Protected app

I've seen scripts like : https://github.com/hluwa/frida-dexdump https://github.com/apkunpacker/DexDumper that can extract the Dex files but what I want is to inject into running app and identified ...
user avatar
  • 257
1 vote
0 answers
61 views

Where can I find the encryption algorithm for this POST request in an Android APP?

I have an Android app for which I need to mock an API call outside of that environment. I successfully killed the certificate pinning on this app with Frida in order to access the URL and more, but ...
user avatar
  • 19
0 votes
0 answers
33 views

Understand a function within Hermes byte code

The Android app I am looking at uses React Native with the Hermes JS Engine. This generates a index.android.bundle binary that contains Hermes JS bytecode. I was able to disassemble the binary file ...
user avatar
1 vote
0 answers
20 views

Compress Xamarin assemblies after decompression

I have an APK that has assemblies in a single blob file. I could extract them successfully using decompress-assemblies. Is there anyway I can compress them again into assemblies.blob file or at least ...
user avatar
0 votes
1 answer
15 views

Gdb hardware watchpoint error on android

After failing to find a solution to this I have started using Gdb and have encountered another error. Gdbfails to set hardware watchpoint when I'm remote debugging a rooted arm7-a target. It supports ...
user avatar
  • 144
2 votes
1 answer
65 views

LLDB debugging on android?

I currently don't have a pc. I have two rooted devices Arm64 host device with Debian rootfs and the device to be debugged which contains the lldb-server binary armv7. I am trying to remote debug my ...
user avatar
  • 144
1 vote
1 answer
53 views

Modify, unpack, and rebuild an Android App Bundles (.aab) file

My developer has not provided me the source code backup for my listed app in Google Play (his PC was stolen and all codes are gone with it). I logged on to my Play Store developer's account and found ...
user avatar
0 votes
0 answers
44 views

How can i inject xamarin smali code into another apk?

I tried to make a simple foreground service android application using xamarin... then decompile and inject it into another apk...but it always crashes. here is adb logcat : 05-31 23:57:34.158 7680 ...
user avatar
0 votes
0 answers
43 views

Trace java calls from a native library using frida

Im trying to trace method calls from a native library using frida I've tried jnitrace but it won't print anything Do you have any suggestion?
user avatar
0 votes
0 answers
33 views

Encrypted properties files in asset folder of android application

I'm trying to reverse engineer an Android application. The goal is to obtain a secret from the apk. After decompiling the application, I found some interesting files in the assets directory. The files ...
user avatar
1 vote
1 answer
235 views

Where can I find the encryption algorithm in source code?

When I submit a Customer Reference ID in an Android Application it POSTs an encrypted string to an API endpoint. For example, if I enter the following CR ID : "SR-54585482" it POSTs the ...
user avatar
0 votes
0 answers
35 views

Linux-based head unit: getting access to displays without any display server?

Overview I have a 2016 Infiniti Q50, which was equipped with an infotainment system called Infiniti InTouch. It consists of two displays (upper and lower), and I have spent the past few weeks reverse ...
user avatar
2 votes
0 answers
242 views

Frida class constructor hook not called while there do exist instances of the class

I have an (obfuscated) app with a certain class from which I would like to hook the constructor. The class has only 1 constructor defined and so I hooked the class as follows: var Aclass = Java.use('...
user avatar
  • 31
1 vote
1 answer
53 views

No main activity when static analysis

Though mainifest.xml, I know main activity is: com.trust.rookie.MainActivity. But when I load the file in jadx, I can't see that class. Why? And how the program can run?
user avatar
0 votes
1 answer
66 views

Capturing ADB commands sent by a Windows program to a phone

I would like to see, what ADB commands a Windows program is sending to my Android phone, to see how it operates it's functions.
user avatar
  • 9
1 vote
0 answers
100 views

Bypassing certificate transparency with Frida

As part of some school research I'm experimenting with Frida to see what can be done to bypass SSLpinning. As I was hooking some methods of an application that throw SSLPeerUnverifiedException I ...
user avatar
  • 31
1 vote
1 answer
50 views

ARM/THUMB assembly mismatch between binaries causes crash

I am trying to play around with an app for Android and every time I try to call a function (lua_gettop() from the Lua 5.1 library) from the app's address space, it hits me with ILL_ILLOPC. I made sure ...
user avatar
  • 11
0 votes
0 answers
57 views

How to gain access to obfuscated files stored within an app's OBB file?

So, for the last few days, I've been working on this problem. I've been trying to gain access to an Android app's code, and have managed to narrow it down (probably) to the app's .OBB file. I can open ...
user avatar
0 votes
1 answer
55 views

How do I gain access to files that an Android app stores in its persistent internal storage directory?

I was playing a game that had hidden achievements and wanted to find the conditions necessary to unlock these achievements. To do this, I've tried to get the source code of the game, to find the ...
user avatar
0 votes
0 answers
24 views

<"..." is not a valid class name"> when trying to debug an android app using jdb

I am trying to reverse engineer an android app for education purpose, but I ran into an annoying problem: the android app is obfuscated and some classnames start with digits. So when I tried putting a ...
user avatar
0 votes
0 answers
86 views

Injecting class into the JNIEnv in android jni

void *handle = dlopen("/data/local/tmp/libnative-lib.so", RTLD_LAZY); if (!handle) { printf("\nFailed to load library\n"); } void *offset = dlsym(handle, "...
user avatar
1 vote
0 answers
39 views

How can I determine the bluetooth commands needed to communicate with my smart scale via bluetooth using my computer?

I have a Tanita-BC401 smart scale. This scale pairs with the "My Tanita" app via Bluetooth. I have enabled the "Bluetooth HCI Snoop Log" developer option in my Android phone and ...
user avatar
2 votes
1 answer
296 views

Debug shared library in Android application

There is an Android application that has a shared library (.so) file in split_config.arm64_v8a.apk that I want to debug . When I look at /proc/PID/maps I don't see that library (I do see the ...
user avatar
  • 23
0 votes
1 answer
223 views

android index.android.bundle file

I downloaded an app from Raccoon. I got these files: com.company.name-3423.apk config.ar-3423.apk config.armeabi_v7a-3423.apk config.en-3423.apk config.iw-3423.apk config.ru-3423.apk config.xhdpi-3423....
user avatar
1 vote
0 answers
64 views

Video Packets via UDP - How to decode or identify video format?

I'm working with a cheap wireless video transmitter and receiver system that uses an Android App to receive the video over WiFi. We want to be able to identify where the stream is coming from to be ...
user avatar
1 vote
0 answers
67 views

Bypassing unsupported android TV box!

I have an android TV box called Proximus decoder v4, anyway the android TV box is not supported anymore by the company. When I turn it on I get an update checking, you can't even cancel it, and then I ...
user avatar
0 votes
0 answers
42 views

How to reverse android native libraries? Best resources? [duplicate]

I want to improve myself in Android penetration testing. For this task i need to learn reversing the native libraries of an APK file to detect vulnerabilities. What is the best way and resources for ...
user avatar
0 votes
2 answers
75 views

why does dalvik remove invocations during optimisation?

This is original smali code of a classes.dex method before installation .method public static createAutoMatchCriteria(IIJ)Landroid/os/Bundle; .registers 6 new-instance v0, Landroid/os/Bundle; ...
user avatar
  • 144
0 votes
0 answers
134 views

Need help logging string in smali

I'm trying to log p1 string to logcat. This is my function. new-instance v4, Ljava/lang/StringBuilder; invoke-direct {v4}, Ljava/lang/StringBuilder;-><init>()V invoke-virtual {v4, v3}, ...
user avatar
0 votes
1 answer
191 views

What does this function do?

I'm trying to understand what client sends to server. I already did most of the work, but one function left. I can't understand what to do with this function and what it does. I've tried to change ...
user avatar
  • 1
2 votes
1 answer
114 views

Debugging Native Lib using IDA Pro Fails to Load Registers and other Information

Currently, I am debugging a native library in a test APK, however I am running into issues. First of all, I can connect to the debugger and attach to the process without any issues. In the first image ...
user avatar
  • 121
0 votes
0 answers
92 views

Modify framework.dex which is in boot.oat?

I pulled down boot.oat from an API22 Android phone. It's Android 5.1 Lollipop which brought the change from Dalvik to ART and is a bit mistified. As far as I understand, modifying boot.oat is not easy,...
user avatar
  • 101
0 votes
0 answers
64 views

Baksmali services.odex from Android L (5.1, API22)

I'm trying to deodex a system file (/system/framework/arm/services.odex) as I need to modify it. I've tried every possible commands found online, but baksmali complains for "unsupported oat ...
user avatar
  • 101
1 vote
0 answers
89 views

Why IDA debugger keep receiving SIGTRAP or SIGSEGV after set a break-point and then deactivated that break-point

Here's the problem: I set a breakpoint in IDA debugger the program stop at the breakpoint deactivated the breakpoint IDA keep receiving SIGTRAP or SIGSEGV ( program stop at breakpoint as expected ) :...
user avatar
2 votes
0 answers
410 views

Can I find usages of this string in my .so file? ARM

My apologies if this question is very basic. I have found this string in my Android application Binary that was built using the flutter framework. This is a 32 bit ARM library. I found the location of ...
user avatar
  • 121
1 vote
2 answers
264 views

Why IDA debugger on android doesn't show all threads?

My IDA Version is IDA Pro 7.5 SP2. And I'm trying to debug a .so file inside a .apk file. Here's what I've done: download a x86_64 system image android emulator from android studio install that .apk ...
user avatar
1 vote
1 answer
101 views

How do I get adb to work on a Rockchip RK3288 based android device running Lollipop 5.1.1?

Lollipop 5.1.1 based device. OLD ES File Manager installed. (Yes, the exploitable one). I can copy to/from the device. I tried Kingo Root, Root Genius, Towel root, etc. None of those work. "...
user avatar
0 votes
0 answers
63 views

Checksum verification of an apk does not the same as my java program

I'm from the sysadmin side of the IT and have not much experience in programing. I have an app that lets me screen share Android apps on my car's display. Sadly there is a whitelist baked into the app,...
user avatar
0 votes
0 answers
99 views

Is this native code possible for further static analysis?

I was trying to reverse engineer a native lib code in an android app. the .so contains many functions. But the function sUQWWyTBEs() was referred in the Java code. I was curious how this function ...
user avatar
  • 179
-1 votes
1 answer
114 views

what do these assembly code doing?

I tried to reverse engineer an apk app, and it was loading a native code. I have observed that the app was using the native code like this public static String v = sUQWWyTBEs().toString().substring(32,...
user avatar
  • 179
2 votes
0 answers
45 views

Cant hook into native lib with script?

im doing some practice stuff about hooking android native lib. I wrote this script: function processJniOnLoad(libraryName) { const funcSym = "...
user avatar
1 vote
1 answer
312 views

Remote debugging android native lib(.so) No connection could be made because the target machine actively refused it. when connecting to

I have a running IDA debug-server on my virtual android device(check attachments). The problem is: when I try hit Attach procces it gives me an error(check title). Here is some kinda params that I'm ...
user avatar
1 vote
1 answer
64 views

How to repack the monobundleapp

I recently had to make a version of a survivalcraft 2 mod that allowed circuits to run faster I found this script by stack overflow to unpack a mono bundle app I already modified the .dll, but I need ...
user avatar
1 vote
1 answer
67 views

analyze how data is read in android usb device

I've a huawei envizion 360, which doesn't provide any API for other application. But I want to read raw data from this device, to an android or to a raspberry-pi for debugging and development purpose. ...
user avatar
2 votes
0 answers
216 views

reversing a grpc call

im reversing a android app and i managed to intercept a grpc request and decode it using protoc but i cant seem to make sense of any of the data, i know its compressed using gzip because of the ...
user avatar
2 votes
1 answer
757 views

How to extract the kernel assembly code from a zImage?

here is the situation, i have a OnePlus phone and i want to explore his kernel, so i downloaded the zip firmware from the oneplus website, extract the img files from the payload.bin, use this tool to ...
user avatar
0 votes
0 answers
2k views

How to decompile a unity apk to a project?

I have tried to decompile a variety of APK's built with unity, but the tools i have used (uTinyRipper, iLSpy, some others) give me some files which give me errors and incomplete code/assets. I see ...
user avatar
0 votes
0 answers
67 views

SSL pinning deep problem

I'm working on one Android app for potential malware analysis and I am trying to MITM it. I found out that the verify function never executes (X509 class) when i hook onto my proxy but rather that app ...
user avatar
1 vote
1 answer
778 views

Is is possible to get versioncode and version number of an app in Google Play?

I want to get version code and version number of an app via API from Google Play, but some apps don't have it via google play website. You have to enter via Google Play app and then you can get ...
user avatar
  • 11
0 votes
1 answer
157 views

$$Lambda$(number) when decompiled Java bytecode

Why when I decompile a Java bytecode (which further was decompiled from .dex), I get $$Lambda$(number), in Java files, and it's not possible to build project with these java codes as it's insufficient ...
user avatar

1
2 3 4 5
7