Upgrade to Pro — share decks privately, control downloads, hide ads and more …

[mDevCamp 2020] Reversing Android Apps

[mDevCamp 2020] Reversing Android Apps

Marc Obrador

June 11, 2020
Tweet

More Decks by Marc Obrador

Other Decks in Programming

Transcript

  1. Protecting against static analysis ProGuard is a good start… for

    regular apps • It’s just method renaming and code shrinking • Tools for reversing ProGuard exist: http://apk-deguard.com/ Other (paid) alternatives exist for obfuscation Writing sensitve code in native (NDK) is a good idea
  2. • Implement Root/Debugger/Emulator/Hooking Framework detection • Use certificate pinning •

    Try to detect app tampering Protecting against dynamic analysis
  3. $ adb install “Downloads/Artà Beer Festival_v1.2.5_apkpure.com.apk” Performing Streamed Install Success

    $ adb shell am start com.marcobrador.android.artabeerfestival/.SplashActivity Starting: Intent { act=android.intent.action.MAIN cat=[android.intent.category .LAUNCHER] cmp=com.marcobrador.android.artabeerfestival/.SplashActivity }