Hot answers tagged


They might be stored encoded/encrypted and decoded/decrypted in runtime, you can validate this if you can capture any API calls in runtime (Not sure if you tried this, but maybe give it a try, in that case you may deal with SSL Certificate Pinning). Another possibility is that they might be split, I faced that case couple of times where only the base address ...

Only top voted, non community-wiki answers of a minimum length are eligible