These slides were used to explain the concepts such as android's native library, NDK and JNI using which demonstration of native library debugging at runtime was presented in #NSConclave2023.

1. @0ninaik & @ps_doom
NETSQUARE
Debugging Android Native
Library
Omkar Naik & Palak Sethia
Venue: AMA, Ahmedabad

2. @0ninaik & @ps_doom
NETSQUARE
Introduction and Agenda
● What is native library?
● JNI
● Analysis
● Static debugging
● Dynamic debugging
● How to efficiently debug?
● Task
● Requirements
● Demo Time!
2

3. @0ninaik & @ps_doom
NETSQUARE
Native Library in android
● C/C++ Code
● Native Development Kit (NDK)
○ compiles the native code into native library
● Features
○ Performance
○ Security
3

4. @0ninaik & @ps_doom
NETSQUARE
Android
Application
NDK
SDK
Java/Kotlin C/C++
JNI
4

5. @0ninaik & @ps_doom
NETSQUARE
Java Native Interface
JNI C/C++
functions/Code
Java Classes/
Dalvik Code
JAVA/Kotli
n
Native
libraries
5

6. @0ninaik & @ps_doom
NETSQUARE
Analysis
● Where to look for?
● Supported architectures
● Identification
static {
System.loadLibrary("lib");
}
OR
static {
System.load("lib/arm64-v8a/lib.so");
}
6

7. @0ninaik & @ps_doom
NETSQUARE
Static debugging
● Code is not executed
● Understand the code logic using graphs,
decompilation etc
● Cannot read variable values
7

8. @0ninaik & @ps_doom
NETSQUARE
#Dynamic
#Debugging
8

9. @0ninaik & @ps_doom
NETSQUARE
● Execute code and try
● Check specific parts of code
● Runtime analysis of code flow and values
● Different tools used for runtime analysis
○ #IDA/Ghidra
○ #Frida
Dynamic Debugging Cont.
9

10. @0ninaik & @ps_doom
NETSQUARE
How to efficiently debug?
● Identify the interesting code in static analysis
● Understand code logic with specific inputs and conditions while execution
● Execute functions which are hard to understand
● Set breakpoints and analyze variables values.
10

11. @0ninaik & @ps_doom
NETSQUARE
TASK
● hpAndro Vulnerable Application
○ Backdoor 7 Task
● Identify Pin to get the flag
11

12. @0ninaik & @ps_doom
NETSQUARE
Requirements
● IDA Pro
● Rooted android device
12

13. @0ninaik & @ps_doom
NETSQUARE
● Task
● Apktool decompile
● Locate .so file for task
● .so file load in IDA
● Start IDA dbgsrv in android
● Decompile the function after identification
● Set debug points
● Start the task
DEMO TIME !
13

14. @0ninaik & @ps_doom
NETSQUARE 14
Thank you