Download to read offline
Uploaded bySatria Ady Pradana
From Reversing to Exploitation: Android Application Security in Essence
This document discusses techniques for analyzing and exploiting Android applications. It begins by explaining why security is important given people's growing dependency on digital technology and mobile devices. It then discusses decompiling APK files and using tools like Apktool, Dex2Jar, and decompilers to view an app's code. The document also covers using proxies like Burp Suite and Frida to intercept network traffic and manipulate app behavior at runtime. The goal is usually to obtain sensitive data, bypass restrictions, or modify the app. Examples of scenarios explored include tampering with network requests, bypassing security checks, and decrypting encrypted data.
More Related Content
![Mobile Application Pentest [Fast-Track]](https://cdn.slidesharecdn.com/ss_thumbnails/mobile1337-140527083940-phpapp02-thumbnail.jpg?width=640&height=640&fit=bounds)
![Hacking Android [MUC:SEC 20.05.2015]](https://cdn.slidesharecdn.com/ss_thumbnails/hackingandroid-150526073254-lva1-app6892-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to From Reversing to Exploitation: Android Application Security in Essence
More from Satria Ady Pradana
From Reversing to Exploitation: Android Application Security in Essence
- 1. From Reversing to Exploitation AndroidApplication Security in Essence Reversing.ID Revealing the Truth through Breaking Things
- 2. Hi! I am SatriaAdy Pradana Cyber Security Consultant @ Mitra Integrasi Informatika xathrya @xathrya Reversing.ID Revealing the Truth through Breaking Things
- 3. First of All,Why Security?
- 4. Cyberspace Around You It’s hardto not depend on IT technology.
- 5. (Y)our Dependency toDigital Technology Communication Entertainment Financial Education News
- 6. Digital Age HasCame. Mobile Device Is the Key. It means most of your activity will have to interact with smartphone.
- 7.
- 8. Android is Dominating,but … With the great userbase comes great threats
- 9. Focus on AndroidApplication Can we pwn the application?
- 10. The Joy ofAndroid Apps Exploitation Application is in your possession. Basically it means we can do anything. Modify, bypass, etc. Your Code is Mine “Your code is not stolen, you give it in binary.”
- 11. Remember this Mantra! APK is just a zip. Everything inside is in binary form. Java can be decompiled. No software is free of bug. Exploitation is not always about taking over devices.
- 12. What Do YouNeed? Proper goals. Proper knowledge. Proper tools and environment.
- 13. Our Goal (Mostly) Obtain the Sensitive Information / Data Get the Algorithm Bypass restriction Manipulate the application.
- 14. Proper Knowledge Basicunderstanding of programming. Know what process involved in building an APK. What should I do for start hacking? Common penetration methodology.
- 15. Analysis Lab Anything youneed to prepare Android Device / Emulator Disassembler Decompiler HTTP / TCP Proxy for MITM Packet Sniffer Dynamic Binary Instrumentation
- 16. Reversing Extracting knowledge, structures,and mechanics of a system. Reversing.ID Komunitas Reverse Engineering Indonesia
- 17.
- 18. About Reverse Engineering Reveal the secret mechanism or components that makes something. Formally it described as “Extracting knowledge or design information from anything man-made and reproducing it or reproduce anything based on the extracted information.” Basically we want to know what secrets behind the application are.
- 19. How APK isMade?
- 20. Code in Java/ Kotlin VS
- 21. Behind the “Build”command* *Simplified build process How to Get the Code Back?
- 22. Peeking Under theAPK Classes.dex, the code in binary AndroidManifest.xml, the manifest META-INF, directory Res, directory, contain resource used by APK
- 23. Step by Step Use ApkTool to extract and decompile the APK to readable code and data. https://ibotpeaches.github.io/Apktool/ $ apktool d the_file.apk Enter the newly created directory. But the code is decompiled to smali, not java (yet) Use Dex2Jar to decompile classes.dex to Java .jar https://github.com/pxb1988/dex2jar $ d2j-dex2jar classes.dex Code in jar, still not in source code
- 24. Step by Stepcont’d Use any java decompiler to decompile java bytecode to source code. JD-GUI Procyon CFR FernFlower Or use the all-in-one solution, such as: ByteCodeViewer, JEB Android.
- 25. Step by Stepcont’d Use MITM proxy to intercept request made by application. Burp Suite ZAProxy Use DBI to manipulate application behavior. Frida
- 26. Intercepting with BurpSuite Create an MITM proxy Force application to send all request via MITM proxy. Setting the proxy option on Android device. Forward / Reject the request from application to server. Tamper the content, modify anything before forwarding.
- 27. What Scenario? Practically,like web hacking or web service hacking. Change ID or parameter, can we access something that should not be accessed? Is sensitive data encrypted? Do we have hardcoded credentials (API key) to access service? etc
- 28. Dynamic Binary Analysis(with Frida) Relatively new approach for analysis. DBI is a method of analyzing the behavior of a binary application at runtime through the injection of instrumentation code. In short: manipulate application behavior by a script (javascript).
- 29. What Frida CanDo? Access process memory Overwrite functions while the application is running Call functions from imported classes Find object instance on the heap and use them Hook, trace, and intercept function. https://www.slideshare.net/satriapradana1/bypass-security- checking-with-frida
- 30. What Scenario? Bypasssecurity checking Root checker SSL pinning Get encryption process, what is the plaintext processed by this function? Modify function as wish, want to make this function always return true.
- 31.
- 32.