reverse engineering
前往频道在 Telegram
◉ A channel for learning and discussing about reverse engineering ◉ We aren't accepting any illegal works, we are here to help, learn and gain new skills ◉ Owner @M0habozaid ◉ Egypt 🇪🇬 Please don't PM ask in discussion group except in necessity
显示更多未指定国家技术与应用21 059
4 300
订阅者
+624 小时
+507 天
+7630 天
帖子存档
4 301
Repost from Th3-R3p4ck3r Mods
secret = "NQALCgEDDDEzUjpTBwocBgcDPTIIGwIK"
key = b'beginning'
import base64
def Dec(sec):
plainText = ""
for i in range(len(sec)):
plainText += chr(sec[i] ^ key[i % len(key)])
return plainText
base64Dec = base64.b64decode(secret)
print(Dec(base64Dec))4 301
Android Application Reverse Engineering Tutorial
◉ This Tutorial is for learning purposes only
◉ For The demo app check the comments (CrackMes.One is the original source) (the app supports all CPUs architectures)
◉ Tools : Jadx-gui, Apktool, jar signer, android emulator (genymotion) or physical device, and Cyber Chief
➜ @reverseengineer101 | @Mohamed_Abozaid1
4 301
Here is the decompiled AndroidManifest.xml of the app if you want to take a look
/* decompiled by jadx */
4 301
+2
If are an Android user like most of us, please check unknown apps before installing or don't even do
Here 👆 is an example of a spy app you can always take a look in AndroidManifest.xml to check the permissions, accessibility, and some actions
4 301
Soon another tutorial about android reverse engineering 🔥
Give reactions, keep supporting
4 301
Useful Channels 🔥
@android_reverse
@android_reverse2
Can be a great resources for courses, tools and more 😉
4 301
Do you know about
wslwsl (Windows Sub-system for Linux) command
You can run various Linux distributions on your Windows via wsl like Ubuntu, kali linux or Arch linux
Note :
This feature isn't coming as a pre-installed program with windows, so you have to install manuallyTo-do : 1 - Open cmd 2 - run :
wsl --helpwsl --install -d <DistroName>wsl --uninstall4 301
Repost from Useful Patches
🚀 Introducing SigTool: APK Signature Analyzer Pro
SigTool is an open-source tool designed for developers and security analysts to perform in-depth APK signature analysis. It offers:
- Signature Extraction & Hash Calculation
- Java-style HashCode Calculation
- PEM Certificate Generation
🔗 GitHub Repository:
https://github.com/muhammadrizwan87/sigtool
✅ Requirements:
pkg install python aapt openssl-tool
📦 Install: pip install sigtool
💡 Usage: sigtool -h
Your feedback and contributions are welcome! If you find it helpful, don’t forget to star ⭐ the repo and share it with your peers.
━━━━━━━━━━━━━━━━━━━
♻️ Join Channel: @Android_Patches
📣 Second Channel: @TDOhex
💬 Discussion Group: @TDOhex_Discussion
━━━━━━━━━━━━━━━━━━━4 301
Wasn't it useful ?
I mean many people saw and no reactions or comments
4 301
➜ Solving OWASP's challenge UnCrackable-Level2
➜ You can consider this video a crash course (Beginner Friendly)
➜ APK full analysis
⚠ This app is made for security testing and reverse engineering propuses❍ Tools and Resources :
🔗App link : https://mas.owasp.org/crackmes/Android/#android-uncrackable-l2 ◉ Frida releases : https://github.com/frida/frida/releases/tag/16.4.8 ◉ Radare2 : https://rada.re/n/ ◉ Jadx-gui : https://github.com/skylot/jadx ◉ APKtool : https://apktool.org/ ◉ Keytool : https://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html ◉ Jarsigner : https://docs.oracle.com/javase/8/docs/technotes/tools/windows/jarsigner.html ◉ adb : https://developer.android.com/tools/adb?hl=ar ⊷ Genymotion : https://www.genymotion.com/ ◉ Java : https://www.java.com/en/ ◉ Python : https://www.python.org/ ⊷ If you are interested about the OS (Kali Linux) : https://www.kali.org/➜ Keep Supporting Us @reverseengineer101
4 301
+4
Some resources in the video
I am not uploading now because it is late and my battery is going to die
4 301
Tools you should know :
1 - radare2 :
> official website :
https://rada.re/n/
> github :
https://github.com/radareorg
2 - Ghidra :
> official website :
https://ghidra-sre.org/
> github :
https://github.com/NationalSecurityAgency/ghidra
3 - IDA Free / IDA Pro (Hex-Rays) :
https://hex-rays.com
4 - Cutter :
> official website :
https://cutter.re/
> github :
https://github.com/rizinorg/cutter
5 - iaito :
> official website :
https://rada.re/n/iaito.html
> github :
https://github.com/radareorg/iaito
6 - reflutter :
https://github.com/ptswarm/reFlutter
7 - B(l)utter :
https://github.com/worawit/blutter
8 - Apktool :
> official website :
https://apktool.org/
> github :
https://github.com/iBotPeaches/Apktool
9 - Jadx-gui :
https://github.com/skylot/jadx
10 - dnSpy :
https://github.com/dnSpy/dnSpy
11 - Binary Ninja :
https://binary.ninja/
12 - x64dbg :
https://x64dbg.com/
4 301
If you are asking about this
This is a solution for the owasp challenge UnCrackable-Level2
In this tutorial you will learn how to analyze full the app and understand its behavior, to bypass root detection by Frida and manually by patching the app, find the activation code which will be in the native code and this will open your eyes on how the integration between java codes and native codes is also what is JNI at the and finally how to patch disassembly by radare2 to bypass the checks of the secret code and more !
I know that there are a lot of people solved that change but I worked on it in a different way with various methods to solve problems
