Skip to content

Instantly share code, notes, and snippets.

View strazzere's full-sized avatar
:shipit:
hacking intensifies

Tim Strazzere strazzere

:shipit:
hacking intensifies
View GitHub Profile
@strazzere
strazzere / idapomidor.patch
Created September 23, 2014 18:15
IDA Pomidor patch
[84%]tstrazzere@bebop:[idapomidor] $ diff idapomidor.py ~/repo/idapomidor-original/idapomidor.py
330,333c330,331
< global idapomidor_manager
< if idapomidor_manager.timer.isActive():
< idapomidor_manager.timer.stop()
< del idapomidor_manager
---
> pass
>
@strazzere
strazzere / Bot.js
Last active August 29, 2015 14:13
Koler.j JavaScript
if (typeof (Bot) == "object") {
}else{
var Bot = (function () {
return {
log: function( str ) {
alert("Write in logfile: "+ str);
},
crackmes
◦ baksma.li/meetup/All-Crackmes.zip
smali / axml reading
◦ option 1: smali / axmlreader
▪ https://github.com/JesusFreke/smali/releases
▪ https://github.com/rednaga/axmlprinter/releases
◦ option 2:
▪ https://github.com/iBotPeaches/Apktool/releases
optional but recommended;
dex2jar;
@strazzere
strazzere / gist:506a592b44c9d228d697
Last active May 9, 2023 16:13
Attaching to fast loading JNI/native code from an Android app without debugging the Dalvik code
The original issue was that some applications (ex. packers) launch the JNI/native code too fast for a person
to attach an IDA Pro instance to the process. The original solution was wrapping the jni code with your own
"surrogate" application so you could load it slower.
New process is to launch the Android/Dalvik activity with the debugger flag;
# adb shell am start -D com.play.goo_w/com.android.netservice.MainActivity
Which will cause the "Waiting for debugger..." mode to start. This starts the process, allowing you to
attach IDA Pro to the process for the native code.
@strazzere
strazzere / pmlistf
Created June 3, 2015 23:18
pm list -f
package:/data/app/org.prowl.torquescan-1/base.apk=org.prowl.torquescan
package:/system/priv-app/FontServer/FontServer.apk=com.hy.system.fontserver
package:/system/priv-app/LGStartupwizard/LGStartupwizard.apk=com.android.LGSetupWizard
package:/system/priv-app/LGVidClip/LGVidClip.apk=com.lge.videotool
package:/system/app/RootPA/RootPA.apk=com.gd.mobicore.pa
package:/data/app/com.google.android.youtube-1/base.apk=com.google.android.youtube
package:/system/app/LGWeatherService/LGWeatherService.apk=com.lge.sizechangable.weather.platform
package:/system/priv-app/LGTelephonyProvider/LGTelephonyProvider.apk=com.android.providers.telephony
package:/data/app/com.onelouder.baconreader-1/base.apk=com.onelouder.baconreader
package:/data/app/com.google.android.googlequicksearchbox-1/base.apk=com.google.android.googlequicksearchbox
This file has been truncated, but you can view the full file.
.:
total 36228
drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 .
drwx------ 14 root root ? 4096 Jun 11 00:19 ..
drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app
drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jan 7 12:47 bin
-rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop
-rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt
drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jan 7 12:47 etc
drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts
This file has been truncated, but you can view the full file.
.:
total 36228
drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 .
drwx------ 15 root root ? 4096 Jun 11 00:31 ..
drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app
drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jun 11 00:38 bin
-rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop
-rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt
drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jun 11 00:37 etc
drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts
@strazzere
strazzere / gist:1d0af78660b55d576bf1
Created June 11, 2015 00:55
fixed output, again
This file has been truncated, but you can view the full file.
.:
total 36228
drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 .
drwx------ 15 root root ? 4096 Jun 11 00:31 ..
drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app
drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jun 11 00:53 bin
-rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop
-rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt
drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jun 11 00:37 etc
drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts
This file has been truncated, but you can view the full file.
.:
total 36228
drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 .
drwx------ 15 root root ? 4096 Jun 11 00:31 ..
drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app
drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jun 11 01:04 bin
-rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop
-rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt
drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jun 11 00:37 etc
drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts
This file has been truncated, but you can view the full file.
.:
total 36228
drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 .
drwx------ 15 root root ? 4096 Jun 11 00:31 ..
drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app
drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jun 11 01:13 bin
-rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop
-rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt
drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jun 11 00:37 etc
drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts