Hot answers tagged

2 votes

ARM/THUMB assembly mismatch between binaries causes crash

The difference is that the first set of instructions are THUMB2 instructions whereas your library's version is using ARM instructions. (The giveaway is in the instruction lengths - mostly 2 sometimes ...
  • 2,239
2 votes
Accepted

Modify, unpack, and rebuild an Android App Bundles (.aab) file

Can I give this .aab file to any developer to update my App? No you can't. The Android App Bundle usually contains compiled DEX code (and optional compiled .so libraries) very similar to the final ...
  • 645
2 votes
Accepted

Where can I find the encryption algorithm in source code?

Based on your screenshots (as already mentioned in comments) - references to mono and xamarin help us understand that the apk is probably built with .NET. In this method the code is probably written ...
  • 2,389
2 votes

Decrypting Lua files encrypt from apk game

You seem to have correctly identified the point where the decryption is invoked. It seems like a1 (the first argument of that function) is a this pointer, pointing to some kind of game engine wrapper ...
1 vote
Accepted

How to set a breakpoint in android's openssl library in running android application?

Do you mean JNI / native libraries? Android app cannot view into native libraries, but you can use frida-trace to get in between the call and return. readelf -a -W library.so | grep ...
  • 156
1 vote
Accepted

Reverse engineering ELF: The e_phentsize field in the ELF header is less than the size of an ELF program header

If you use a hex editor and set e_phentsize (offset 0x2a) to 0x20 it works fine, I believe 0x20 is standard for 32bit. $ readelf -l libTheArmKing.so Elf file type is DYN (Shared object file) Entry ...
1 vote
Accepted

LLDB debugging on android?

I don't know if this should be an answer or not. I finally managed to use lldb remote debugging but again faced more challenges but eventually prevailed. What I did was instead of using lldb platform ...
  • 144
1 vote

No main activity when static analysis

That's because the sample is packed. What you see in JADX is the packer's code. It unwraps/decrypts a payload DEX and then loads it (typically, look for DexClassLoader). This payload DEX has the main ...
1 vote

Capturing ADB commands sent by a Windows program to a phone

ADB is a combination of three components: 1 A client, which sends commands. The client runs on your development machine. You can invoke a client from a command-line terminal by issuing an adb command....
  • 645
1 vote
Accepted

Debug shared library in Android application

What you see is possible if the APK files uses the mode extractNativeLibs="false". If that attribute is set in the <application tag in AndroidManifest.xml then Android loads the .so files ...
  • 645
1 vote

android index.android.bundle file

You can try Android's bundletool. As Google explains, on building an AAB with bundletool, it may be helpful "to convert your app's compiled code and resources into app bundles".
1 vote

print [B byte array in frida js script

One liner console.log(Java.use("java.util.Arrays").toString(ret));
  • 11
1 vote

IDA Pro 6.4 android_server processattach failed

As mentioned, you have pushed the android_server to your emulator and executed it. So I guess you may forget forward your data from your development machine to your emulator. As you executed the ...
  • 11

Only top scored, non community-wiki answers of a minimum length are eligible