Android Reverse Engineering - GDG Munich

Talk at GDG Munich / GDG Barcelona.

Evento de G+: https://plus.google.com/events/ch600amnec0ltr0rjtk3j0ac3ts

Video con el Hangout:
https://www.youtube.com/watch?feature=player_embedded&v=zEJ_9vt9D1M

SwiftKey keylogger experiment: http://www.android-app-development.ie/blog/2013/03/06/inserting-keylogger-code-in-android-swiftkey-using-apktool/

Transcript

1. Donnerstag, 4. April 13
2. Reverse Engineering Is the process of discovering the technological principles of a device, object, or system through analysis of its structure, function, and operation1 1 Eilam, Eldad & Chikofsky, Elliot J. (2007). Reversing: secrets of reverse engineering. Donnerstag, 4. April 13
3. Purpose Valuable data Interfacing Security analysis Donnerstag, 4. April 13
4. Android Compiling process Coding in Java Compiling to Dalvik Packaging Distribution Donnerstag, 4. April 13
5. (de)distribution Pulling from device Directly download via googleplay-pythonapi Download from web Donnerstag, 4. April 13
6. (de)distribution Donnerstag, 4. April 13
7. (de)packaging (de)compiling From dex to .smali or .java dex2jar apktool Donnerstag, 4. April 13
8. Smali Donnerstag, 4. April 13
9. APK Tool https://code.google.com/p/android-apktool/ downloads/list Jar Signer http://docs.oracle.com/javase/1.3/docs/ tooldocs/win32/jarsigner.html Keytool http://docs.oracle.com/javase/6/docs/ technotes/tools/windows/keytool.html Donnerstag, 4. April 13
10. Crackme http://crackmes.de/users/deurus/ android_crackme03/ dex2jar http://code.google.com/p/dex2jar/ JD-GUI http://java.decompiler.free.fr/ Donnerstag, 4. April 13
11. Smali http://pallergabor.uw.hu/androidblog/ dalvik_opcodes.html Donnerstag, 4. April 13
12. Security Tokens Private addresses Unauthorized access Cheating Donnerstag, 4. April 13
13. Proguard Obfuscating and optimizing tool http://developer.android.com/tools/help/ proguard.html Donnerstag, 4. April 13
14. Thank you! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Donnerstag, 4. April 13