6
votes
Accepted
[Ghidra]How to set global variable type?
First get the DataType that you want, for example struct foo:
DataType dt = getDataTypes("foo")[0];
Or if it's just a pointer you'll have to get the pointer of that type.
You said you ...
- 441
2
votes
Accepted
Where can I find the encryption algorithm in source code?
Based on your screenshots (as already mentioned in comments) - references to mono and xamarin help us understand that the apk is probably built with .NET. In this method the code is probably written ...
- 2,434
2
votes
Accepted
Automatic deobfuscation of Java class/method/parameter names with access to old non obfuscated sources
Have you tried https://github.com/FabricMC/Matcher?
It doesn't always create the best matches automatically but it helps a lot by suggesting classes/methods/fields that are similar to each other ...
- 36
1
vote
Accepted
How to set a breakpoint in android's openssl library in running android application?
Do you mean JNI / native libraries?
Android app cannot view into native libraries, but you can use frida-trace to get in between the call and return.
readelf -a -W library.so | grep ...
- 156
1
vote
How to utilize `FillOutStructureCmd`?
I figure it out something like this does it:
public class CreateStructure extends GhidraScript {
@Override
public void run() throws Exception {
/*println("" + ...
- 425
1
vote
Decompile obfuscated jar file
The classes 0, 1, 2 and 3 show patterns matching that of binscure, not Allatori. There are multiple open issues for java-deobfuscator on adding support for binscure, but there is no active development ...
- 118
Only top scored, non community-wiki answers of a minimum length are eligible