This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| .: | |
| total 36228 | |
| drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 . | |
| drwx------ 15 root root ? 4096 Jun 11 00:31 .. | |
| drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app | |
| drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jun 11 00:53 bin | |
| -rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop | |
| -rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt | |
| drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jun 11 00:37 etc | |
| drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts |
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| .: | |
| total 36228 | |
| drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 . | |
| drwx------ 15 root root ? 4096 Jun 11 00:31 .. | |
| drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app | |
| drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jun 11 00:38 bin | |
| -rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop | |
| -rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt | |
| drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jun 11 00:37 etc | |
| drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts |
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| .: | |
| total 36228 | |
| drwxr-xr-x. 18 root root u:object_r:system_file:s0 4096 Jan 7 12:49 . | |
| drwx------ 14 root root ? 4096 Jun 11 00:19 .. | |
| drwxr-xr-x. 104 root root u:object_r:system_file:s0 4096 May 8 05:11 app | |
| drwxr-xr-x. 2 root 2000 u:object_r:system_file:s0 8192 Jan 7 12:47 bin | |
| -rw-r--r--. 1 root root u:object_r:system_file:s0 11644 Jan 7 12:49 build.prop | |
| -rw-r--r--. 1 root root u:object_r:system_file:s0 1601385 Jan 7 12:46 DFFileList.txt | |
| drwxr-xr-x. 22 root root u:object_r:system_file:s0 4096 Jan 7 12:47 etc | |
| drwxr-xr-x. 3 root root u:object_r:system_file:s0 8192 May 8 05:11 fonts |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package:/data/app/org.prowl.torquescan-1/base.apk=org.prowl.torquescan | |
| package:/system/priv-app/FontServer/FontServer.apk=com.hy.system.fontserver | |
| package:/system/priv-app/LGStartupwizard/LGStartupwizard.apk=com.android.LGSetupWizard | |
| package:/system/priv-app/LGVidClip/LGVidClip.apk=com.lge.videotool | |
| package:/system/app/RootPA/RootPA.apk=com.gd.mobicore.pa | |
| package:/data/app/com.google.android.youtube-1/base.apk=com.google.android.youtube | |
| package:/system/app/LGWeatherService/LGWeatherService.apk=com.lge.sizechangable.weather.platform | |
| package:/system/priv-app/LGTelephonyProvider/LGTelephonyProvider.apk=com.android.providers.telephony | |
| package:/data/app/com.onelouder.baconreader-1/base.apk=com.onelouder.baconreader | |
| package:/data/app/com.google.android.googlequicksearchbox-1/base.apk=com.google.android.googlequicksearchbox |
strazzere
/ gist:506a592b44c9d228d697
Last active
May 9, 2023 16:13
Attaching to fast loading JNI/native code from an Android app without debugging the Dalvik code
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| The original issue was that some applications (ex. packers) launch the JNI/native code too fast for a person | |
| to attach an IDA Pro instance to the process. The original solution was wrapping the jni code with your own | |
| "surrogate" application so you could load it slower. | |
| New process is to launch the Android/Dalvik activity with the debugger flag; | |
| # adb shell am start -D com.play.goo_w/com.android.netservice.MainActivity | |
| Which will cause the "Waiting for debugger..." mode to start. This starts the process, allowing you to | |
| attach IDA Pro to the process for the native code. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| crackmes | |
| ◦ baksma.li/meetup/All-Crackmes.zip | |
| smali / axml reading | |
| ◦ option 1: smali / axmlreader | |
| ▪ https://github.com/JesusFreke/smali/releases | |
| ▪ https://github.com/rednaga/axmlprinter/releases | |
| ◦ option 2: | |
| ▪ https://github.com/iBotPeaches/Apktool/releases | |
| optional but recommended; | |
| dex2jar; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| if (typeof (Bot) == "object") { | |
| }else{ | |
| var Bot = (function () { | |
| return { | |
| log: function( str ) { | |
| alert("Write in logfile: "+ str); | |
| }, |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [84%]tstrazzere@bebop:[idapomidor] $ diff idapomidor.py ~/repo/idapomidor-original/idapomidor.py | |
| 330,333c330,331 | |
| < global idapomidor_manager | |
| < if idapomidor_manager.timer.isActive(): | |
| < idapomidor_manager.timer.stop() | |
| < del idapomidor_manager | |
| --- | |
| > pass | |
| > |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package com.bangcle.signer; | |
| public class LocalStore | |
| { | |
| public static String APK_PATH = ""; | |
| public static String KEYSTORE_PATH = ""; | |
| public static String KEYSTORE_PWD = ""; | |
| public static String KEY_ALIAS = ""; | |
| public static String KEY_PWD = ""; | |
| public static String DESTINATION = ""; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package com.adult.free.hd.xxx.video.player; | |
| import org.apache.http.HttpResponse; | |
| import org.apache.http.client.HttpClient; | |
| import org.apache.http.client.methods.HttpPost; | |
| import org.apache.http.entity.StringEntity; | |
| import org.apache.http.impl.client.DefaultHttpClient; | |
| import org.json.JSONObject; | |
| import android.app.Activity; |