Introduction to APK Reversing techniques - Revision history

NKirnbauer: reference fix

2024-08-28T15:13:51Z

reference fix

← Older revision		Revision as of 15:13, 28 August 2024
Line 108:		Line 108:
	==== Some Static Tools====		==== Some Static Tools====
	{\|class="wikitable"		{\|class="wikitable"
	\|'''apktool''' \|\| decompiling layout, values, resources XML files \|\| https://ibotpeaches.github.io/Apktool/		\|'''apktool''' \|\| decompiling layout, values, resources XML files \|\| https://ibotpeaches.github.io/Apktool/ <ref name="apktool"/>
	\|-		\|-
	\|'''dex2jar''' \|\| decompiling dex(Dalvic executable) to a jar file \|\| https://github.com/pxb1988/dex2jar		\|'''dex2jar''' \|\| decompiling dex(Dalvic executable) to a jar file \|\| https://github.com/pxb1988/dex2jar

NKirnbauer: gendering

2024-08-23T08:33:19Z

gendering

← Older revision		Revision as of 08:33, 23 August 2024
Line 173:		Line 173:
	Source: 36c3		Source: 36c3
	It’s too hard to gain all 1337 h4x0r skills required by nowadays CTFs ._.!		It’s too hard to gain all 1337 h4x0r skills required by nowadays CTFs ._.!
	I am glad a friendly hacker told me about an App he got during a (growth) hacking course.		I am glad a friendly hacker told me about an App they got during a (growth) hacking course.
	Sadly, he didn’t wrote down any activations codes.		Sadly, they didn’t wrote down any activations codes.
	Ready for your hacking exam?		Ready for your hacking exam?

Ikramer: /* Courses */

2020-05-19T15:18:07Z

Courses

← Older revision		Revision as of 15:18, 19 May 2020
Line 212:		Line 212:
	== Courses ==		== Courses ==

	* [[Campus Cyber Security Team]] (2020)		* [[Campus Cyber Security Team]] (2020), presentation [[Media: Ctf_apkreversing.pdf ]]

	== Online Tutorials ==		== Online Tutorials ==

Ikramer: /* KGB Messenger - CTF App written for apk Reversing */

2020-05-19T15:08:27Z

KGB Messenger - CTF App written for apk Reversing

← Older revision		Revision as of 15:08, 19 May 2020
Line 190:		Line 190:
	* MasonCC: https://competitivecyber.club/		* MasonCC: https://competitivecyber.club/

	* Introduction		* '''Introduction'''
	KGB Messenger is a open source CTF practice challenge that aims to help people learn how to reverse engineer Android applications. If you're completely new to Android application reverse engineering, I'd suggest you start by watching the video lecture from George Mason University's MasonCC club. If you're stuck on any of the challenges, feel free to peek at the video walkthrough for some help. Timestamps have been provided in the walkthrough video's description to prevent unwanted spoilers. To get started, download the APK and read the challenge descriptions below.		KGB Messenger is a open source CTF practice challenge that aims to help people learn how to reverse engineer Android applications. If you're completely new to Android application reverse engineering, I'd suggest you start by watching the video lecture from George Mason University's MasonCC club. If you're stuck on any of the challenges, feel free to peek at the video walkthrough for some help. Timestamps have been provided in the walkthrough video's description to prevent unwanted spoilers. To get started, download the APK and read the challenge descriptions below.

	* Challenges		* '''Challenges'''
	You are working for the International Secret Intelligence Service as a reverse engineer. This morning your team lead assigned you to inspect an Android application found on the phone of a misbehaving agent. It’s rumored that the misbehaving agent, Sterling Archer, has been in contact with some KGB spies. Your job is to reverse engineer the application to verify the rumor.		You are working for the International Secret Intelligence Service as a reverse engineer. This morning your team lead assigned you to inspect an Android application found on the phone of a misbehaving agent. It’s rumored that the misbehaving agent, Sterling Archer, has been in contact with some KGB spies. Your job is to reverse engineer the application to verify the rumor.

	The challenges should be solved sequentially. The flag format is FLAG{insert_flag_here}. Good luck!		The challenges should be solved sequentially. The flag format is FLAG{insert_flag_here}. Good luck!

	* Alerts (Medium)		* '''Alerts (Medium)'''
	The app keeps giving us these pesky alerts when we start the app. We should investigate.		The app keeps giving us these pesky alerts when we start the app. We should investigate.

	* Login (Easy)		* '''Login (Easy)'''
	This is a recon challenge. All characters in the password are lowercase.		This is a recon challenge. All characters in the password are lowercase.

	* Social Engineering (Hard)		* '''Social Engineering (Hard)'''
	It looks like someone is bad at keeping secrets. They're probably susceptible to social engineering... what should I say?		It looks like someone is bad at keeping secrets. They're probably susceptible to social engineering... what should I say?

Ikramer at 15:06, 19 May 2020

2020-05-19T15:06:57Z

← Older revision		Revision as of 15:06, 19 May 2020
Line 1:		Line 1:
	~~bbbbbbbbbbbbbbbbb~~== Summary ==		== Summary ==

	This page describes various methods that can be used to reverse engineer mobile phone applications. An Android Package Kit (APK) is the package file format used by the Android operating system for distribution and installation of mobile apps.		This page describes various methods that can be used to reverse engineer mobile phone applications. An Android Package Kit (APK) is the package file format used by the Android operating system for distribution and installation of mobile apps.

Ikramer at 15:06, 19 May 2020

2020-05-19T15:06:40Z

← Older revision		Revision as of 15:06, 19 May 2020
Line 1:		Line 1:
	== Summary ==		bbbbbbbbbbbbbbbbb== Summary ==

	This page describes various methods that can be used to reverse engineer mobile phone applications. An Android Package Kit (APK) is the package file format used by the Android operating system for distribution and installation of mobile apps.		This page describes various methods that can be used to reverse engineer mobile phone applications. An Android Package Kit (APK) is the package file format used by the Android operating system for distribution and installation of mobile apps.
Line 162:		Line 162:
	==== Secrets - easy ====		==== Secrets - easy ====
	Source: TAMUCTF 2019 https://tamuctf.com		Source: TAMUCTF 2019 https://tamuctf.com
			Can you find my secrets?
			flagformat: gigem{..}

	====localnews - medium-hard====		====localnews - medium-hard====
	Source: TAMUCTF 2019 https://tamuctf.com		Source: TAMUCTF 2019 https://tamuctf.com
			Be sure to check your local news broadcast for the latest updates!
			flagformat: gigem{..}

	==== 36c3_1337_skills - medium hard====		==== 36c3_1337_skills - medium hard====
	Source: 36c3		Source: 36c3
			It’s too hard to gain all 1337 h4x0r skills required by nowadays CTFs ._.!
			I am glad a friendly hacker told me about an App he got during a (growth) hacking course.
			Sadly, he didn’t wrote down any activations codes.
			Ready for your hacking exam?

			Find following codes:
			* Activation code
			* Sales activation code
			* Leadership activation code
			* Service Roadmap (SRM) activation code

	==== KGB Messenger - CTF App written for apk Reversing====		==== KGB Messenger - CTF App written for apk Reversing====
	* Source: https://github.com/tlamb96/kgb_messenger		* Source: https://github.com/tlamb96/kgb_messenger

Ikramer: /* OWASP_app MSTG-Android-Java.apk */

2020-05-19T15:01:33Z

OWASP_app MSTG-Android-Java.apk

← Older revision		Revision as of 15:01, 19 May 2020
Line 148:		Line 148:
	* Install app on your phone with adb - try it out		* Install app on your phone with adb - try it out
	* Unzip MSTG-Android-Java.apk		* Unzip MSTG-Android-Java.apk
	* Examine the certificate who is subject and issuer?		** Examine the certificate who is subject and issuer?
	* Examine classes.dex		** Examine classes.dex
	* Unpack MSTG-Android-Java.apk with apktool		* Unpack MSTG-Android-Java.apk with apktool
	* What are the app permissions?		** What are the app permissions?
	* What entry point has the app?		** What entry point has the app?
	* Examine smali folder		** Examine smali folder
	* Use dex2jar to decompile MSTG-Android-Java.apk to a packed .jar file		* Use dex2jar to decompile MSTG-Android-Java.apk to a packed .jar file
	* Use jd-gui to examine the java classes of the .jar file		* Use jd-gui to examine the java classes of the .jar file

Ikramer at 14:53, 19 May 2020

2020-05-19T14:53:35Z

@@ Line 161: / Line 161: @@
 === Android CTF Challenges ===
 ==== Secrets - easy ====
-* localnews - medium-hard
+Source: TAMUCTF 2019 https://tamuctf.com
 == Used Hardware ==

Ikramer at 13:47, 19 May 2020

2020-05-19T13:47:19Z

@@ Line 136: / Line 136: @@
 |'''Fuzzers''' <ref name="fuzzers" />|| .... ||
 |}
 == Used Hardware ==

Ikramer at 21:55, 31 March 2020

2020-03-31T21:55:16Z

← Older revision		Revision as of 21:55, 31 March 2020
Line 134:		Line 134:
	\|'''Frida''' \|\| hook in function call of an .apk \|\| https://frida.re/		\|'''Frida''' \|\| hook in function call of an .apk \|\| https://frida.re/
	\|-		\|-
	\|'''Fuzzers''' \|\| ....		\|'''Fuzzers''' <ref name="fuzzers" />\|\| .... \|\|
	\|}		\|}

Line 153:		Line 153:
	<ref name="adb">https://developer.android.com/studio/command-line/adb</ref>		<ref name="adb">https://developer.android.com/studio/command-line/adb</ref>
	<ref name="apktool">https://ibotpeaches.github.io/Apktool/</ref>		<ref name="apktool">https://ibotpeaches.github.io/Apktool/</ref>
			<ref name="fuzzers">https://www.blackhat.com/docs/eu-15/materials/eu-15-Blanda-Fuzzing-Android-A-Recipe-For-Uncovering-Vulnerabilities-Inside-System-Components-In-Android-wp.pdf</ref>
	</references>		</references>
	[[Category:Basic]]		[[Category:Basic]]