Android Reverse Engineering - GDG Munich

Slide 1

Slide 1 text

Donnerstag, 4. April 13

Slide 2

Slide 2 text

Reverse Engineering Is the process of discovering the technological principles of a device, object, or system through analysis of its structure, function, and operation1 1 Eilam, Eldad & Chikofsky, Elliot J. (2007). Reversing: secrets of reverse engineering. Donnerstag, 4. April 13

Slide 3

Slide 3 text

Purpose Valuable data Interfacing Security analysis Donnerstag, 4. April 13

Slide 4

Slide 4 text

Android Compiling process Coding in Java Compiling to Dalvik Packaging Distribution Donnerstag, 4. April 13

Slide 5

Slide 5 text

(de)distribution Pulling from device Directly download via googleplay-pythonapi Download from web Donnerstag, 4. April 13

Slide 6

Slide 6 text

(de)distribution Donnerstag, 4. April 13

Slide 7

Slide 7 text

(de)packaging (de)compiling From dex to .smali or .java dex2jar apktool Donnerstag, 4. April 13

Slide 8

Slide 8 text

Smali Donnerstag, 4. April 13

Slide 9

Slide 9 text

APK Tool https://code.google.com/p/android-apktool/ downloads/list Jar Signer http://docs.oracle.com/javase/1.3/docs/ tooldocs/win32/jarsigner.html Keytool http://docs.oracle.com/javase/6/docs/ technotes/tools/windows/keytool.html Donnerstag, 4. April 13

Slide 10

Slide 10 text

Crackme http://crackmes.de/users/deurus/ android_crackme03/ dex2jar http://code.google.com/p/dex2jar/ JD-GUI http://java.decompiler.free.fr/ Donnerstag, 4. April 13

Slide 11

Slide 11 text

Smali http://pallergabor.uw.hu/androidblog/ dalvik_opcodes.html Donnerstag, 4. April 13

Slide 12

Slide 12 text

Security Tokens Private addresses Unauthorized access Cheating Donnerstag, 4. April 13

Slide 13

Slide 13 text

Proguard Obfuscating and optimizing tool http://developer.android.com/tools/help/ proguard.html Donnerstag, 4. April 13

Slide 14

Slide 14 text

Thank you! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Donnerstag, 4. April 13