Schadenfreude Channel

APKLeaks: Scanning APK file for URIs, endpoints & secrets ## requirements: *. python 3 *. jadx ## Setup basic stuff $ apt update -y && apt upgrade -y $ apt install python -y ## Check if you have jadx on your system $ command -v jadx ## Skip this below block of command if you already Install JaDX $ apt install dpkg wget -y $ wget https://github.com/Lexiie/Termux-Jadx/blob/master/jadx-0.6.1_all.deb?raw=true $ dpkg -i jadx-0.6.1_all.deb?raw=true $ rm -rf jadx-0.6.1_all.deb?raw=true $ python -m pip install apkleaks Usage: apkleaks -f /path/file.apk Written by @deletuserbot https://t.me/schdenfreude -=[ Schadenfreude Reversing Group ]=-

Arm Source Code Build the required environment: PHP8.0 version, database version 8.0 Pagoda first firewall first open port 8000 and 10000-10020 yum install java-1.8.0-openjdk* -y install Java environment 1. Configure the registration machine file, open the arm. In the zip/res directory, mt manager searches for 64yun.cn and changes all of them to your own domain name or server IP 2. Then create a database database account arm database username arm database password EsZfXY4tD3h2NNA4 3. Import the database 4. Configure Redis, Pagoda App Store search Redis bind 127.0.0.1 Bind IP port 5555 Bind port requirepass armadillo666 redis password, leave it blank means no password is set, others are default 5. Then download all the resource files to the server after arm.zip is modified ( Step 1) Upload to the www directory Upload basic.zip to the www directory and then upload the jar package to the root directory 6. The jar package mount command: nohup java -jar Ultima-1.0-SNAPSHOT.jar -sp 10000 -ep 10020 - io 125 -s 15000 -x 16000 >> run.log 2>&1 & 7. The arm source code has no background function, you can explore it yourself, the configuration text can be modified in the text content files such as arm/config 8. So where does the APP come from? You can download my arm max mt manager, extract the installation package, search for arm.64yun.cn in resources.arsc, and change it to your domain name or IP. You can hi. This is what I shared with Baidu network disk. Content ~ Copy this content and open the "Baidu SkyDrive" APP to get the  link: https://pan.baidu.com/s/1v4T8Isx7JXPnVoxOTVqdMQ  Extraction code: agrx Source : MT forum

# DTL-X An Advanced Python APK Reverser and Patcher Tool. --rmads1: target=AndroidManifest.xml,replace=com.google.android.gms.ad --rmads2: No Internet (remove the required permission to do so) --rmads3: Search using regex and replace string ("ca-app-pub) with ("noads) --rmads4: (Powerful) Disable all kind of ads loader base on the dictionary list --rmnop: Remove all nop instruction found on the smali file --rmunknown: Remove all unknown files (.properties, etc) --customfont: Update and replace all font files with user recommended file --rmcopy: Remove AppCloner Copy Protection --rmprop: Remove only .properties file --rmtrackers: Remove Trackers --cleanrun: Remove the decompiled project after done patching • note 1: remove any whitespace found on the apk file name before patching • note 2: you can use multiple method in a single run: python dtlx.py --rmprop --rmads4 --cleanrun file.apk • note 3: remember the execution of method start from left to right, based on the above command: remove .properties then remove ads • note 4: if you want to update to the latest version just type: git pull . ### Requirements • python 3.x • apktool v2.6.1-dirty • smali v2.5.2 and baksmali v2.5.2 • aapt & aapt2 (patched version, could be found on assets/) • apksigner • openjdk ### Installation bash apt install

 python git apktool apksigner openjdk-17
git clone https://github.com/Gameye98/DTL-X
python -m pip install loguru
cd DTL-X
# Btw you need to replace the old/regular aapt with the patched version
# The old/regular version could not handle filename with symbol
# You can find the patched version of aapt on directory assets/
cp assets/aapt "$(command -v aapt)"
cp assets/aapt2 "$(command -v aapt2)"
python dtlx.py


#### Follow Ou

r Channel or Join Our Discussion - [BlackHole Security Org](https://github.com/BlackHoleSecurity) - [Schadenfreude Discussion](https://t.me/schdenfreude) - [Schadenfreude Channel](https://t.me/schdnfrd) #### Credits - aapt & aapt2 (patched version) from Apktool M

### If-Equals String const-string v0, "a" .line 8 const-string v1, "b" .line 9 invoke-virtual {v0, v1}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z move-result v0 Written by @deletuserbot https://t.me/schdenfreude -=[ Schadenfreude Reversing Group ]=-

Filename: iA Writer_2.1.2.2 (160).apk Package: net.ia.iawriter.x Mod Info: Premium https://play.google.com/store/apps/details?id=net.ia.iawriter.x Lefo;->a(Lof$a;Ljava/lang/String;)Z Insert this code below .register const/4 v0, 0x1 return v0 Written by @deletuserbot https://t.me/schdenfreude -=[ Schadenfreude Reversing Group ]=-

Uncompress zlib compressed data (openssl) $ openssl zlib -d < /tmp/data $ openssl zlib -d -in /tmp/data Written by @deletuserbot https://t.me/schdenfreude -=[ Schadenfreude Reversing Group ]=-

Print strings & RecordAll Move to /storage/emulated/0/MT2/injectionSchemes How to use: Select APK > Function > Log Injection > Scheme Output log: /storage/emulated/0/MT2/logs Written by @deletuserbot https://t.me/schdenfreude -=[ Schadenfreude Reversing Group ]=-