Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Hack And Protect Your Apps
Search
Slvn
April 09, 2015
Programming
4
300
Hack And Protect Your Apps
Droidcon Montreal 2015
Slvn
April 09, 2015
Tweet
Share
More Decks by Slvn
See All by Slvn
ROM Cooking - Droidcon UK 20013
slvn
5
190
Hack and protect your Android app
slvn
1
370
Other Decks in Programming
See All in Programming
Developer Joy == Developer Productivity (really!)
hollycummins
1
240
Pythonで改めて考える「クラス(class)」の使いどころ
os1ma
7
1.8k
はじめてみよう量子プログラミング
itokoichi01
0
230
Scala アプリケーションのビルドを改善してデプロイ時間を 1/4 にした話 | How I improved the build of my Scala application and reduced deployment time by 4x
nomadblacky
1
180
LangChainでWebサイトの内容取得やGitHubソースコード取得
shukob
0
160
事業フェーズの変化に対応する 開発生産性向上のゼロイチ
masaygggg
0
220
Kotlin 2.0 and Beyond
antonarhipov
2
150
Some more adventure of Happy Eyeballs
coe401_
2
190
意外とフォントが大事だった話 / Font Issues on Internationalization
fumi23
0
110
rbs-inlineを導入してYARDからRBSに移行する
euglena1215
1
300
Kotlin 2.0が与えるAndroid開発の進化
masayukisuda
1
420
Data Contracts In Practice With Debezium and Apache Flink
gunnarmorling
0
110
Featured
See All Featured
The Illustrated Children's Guide to Kubernetes
chrisshort
47
48k
Become a Pro
speakerdeck
PRO
22
4.9k
We Have a Design System, Now What?
morganepeng
48
7.1k
Building a Modern Day E-commerce SEO Strategy
aleyda
36
6.8k
Code Reviewing Like a Champion
maltzj
517
39k
Sharpening the Axe: The Primacy of Toolmaking
bcantrill
36
1.7k
JavaScript: Past, Present, and Future - NDC Porto 2020
reverentgeek
45
4.8k
Making the Leap to Tech Lead
cromwellryan
128
8.8k
The Language of Interfaces
destraynor
153
23k
The World Runs on Bad Software
bkeepers
PRO
64
11k
Product Roadmaps are Hard
iamctodd
PRO
48
10k
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
36
2.1k
Transcript
HACK AND PROTECT YOUR APPS
AGENDA Droidcon Montréal 2015 01 Hack 02 Protect 03 Develop
04 Conclude
LET’S HACK Reverse engineering & red light saber
LET’S HACK Reverse engineering & red light saber You underestimate
the power of the dark side.
LET’S HACK Demo : AdBlock Plus
LET’S HACK Can we read Smali ? .method public isChecked
()Z .locals 1 .prologue .line 102 iget-boolean v0, p0, Lorg/jraf/android/backport/switchwidget/TwoStatePreference ;- >mChecked:Z return v0 .end method
LET’S HACK Tools adb + unzip extract apk and some
ressources apktool Smali + ressources jadx Java code (partial)
LET’S PROTECT Obfuscation & The Force
LET’S PROTECT Obfuscation & The Force Do. Or do not.
There is no try.
LET’S PROTECT What is obfuscation ? package a; public class
a { [...] public boolean a() { return a; } }
LET’S PROTECT Demo : Proguard
LET’S PROTECT Is Obfuscation enough ? public class a {
private static String a = "MotDePasseSecurePourChiffrer" ; public static Cipher a() { Cipher localCipher = Cipher.getInstance("AES/ECB/PKCS7Padding" , "BC"); localCipher .init(1, new SecretKeySpec (a.getBytes(), "AES")); return localCipher; } }
LET’S PROTECT When ? When to protect ? · Whenever
you want · Keep in mind that one motivated guy with enought ressources can break anything.
LET’S DEVELOP Audit, opportunism & more...
LET’S DEVELOP Audit, opportunism & more... GGGWARRRHH WWWW
LET’S DEVELOP How can this help me ? audit your
build, third parties apps explore frameworks debug, hidden APIs ...
LET’S CONCLUDE All good things must come to an end
LET’S CONCLUDE All good things come to an end LET’S
HACK LET’S PROTECT LET’S DEVELOP
Thank you ! Sylvain Galand
[email protected]
www.genymobile.com