CTF Practice - Reverse Engineering Android Apps 101

Introduction


On this blog we will crack some real world unsecured Android applications.

For educational purpose only!

Disclaimer: This guide is provided "as is" with no warranties with regard to the accuracy and completeness of the information provided herein. I am not responsible for any bad outcomes you or anyone may have because you followed this guide. I expect you to have knowledge of some programming language (Java, Kotlin, C/C++, C#), an inquisitive mind to try things out, and the patience to first google and try to find answers to simple questions.


Environment:

  • OpenJDK 8
  • Android Studio SDK
  • Visual Studio Code IDE with APKLab


Reverse Engineering Android Apps - DEX Bytecode

The goal of this exercise is to crack a real world Android apps to bypass the verification code to become a premium user.


Step 0x1


Step 0x2

Decompile the APK with Visual Studio Code.



Step 0x3

Examine the manifest. We see that it only have one activity.



Step 0x4

Look for if-else condition. Open the file that contains the code.



Step 0x5

Capture the code and alter the variable that holds the user input. Simply add the following code as you can see in this image



Step 0x6

Rebuild the APK and install on an Android device to test.



The crack will now accept any invalid code and unlock the app!




Reverse Engineering Android Apps - Native Libraries

Android applications can contain compiled, native libraries. Native libraries are code that the developer wrote and then compiled for a specific computer architecture. The code is written in C or C++. Reverse engineering compiled binaries tends to be a less common skillset than analyzing DEX bytecode. This is largely due to DEX bytecode can be decompiled to Java whereas native, compiled code, often must be analyzed as assembly.


Exercise

This exercise is not easy if you don't know binary/ASM hacking because the app login verification and secrets are stored in C/C++ code. You should learn ARM Assembly Basics.

Here's what the dissembled native libraries looks like in this exercise


Advance Tasks

  • Modify the Login-CTF.apk to bypass the login.
  • Modify the Login-CTF.apk to steal the correct username and password, then forward it to your own server.

You can wrote a blog about this hacking challenge.


Comments

Post a Comment

Popular posts from this blog

How To Check If Your Android Phone Is Official Or Rooted

Image
You are probably here because you're uncertain if your phone has been rooted or official. This blog posts will tell you several ways to check if your phone is rooted (tampered). Usually Android phone manufacturers are putting restrictions to what the users can do and install on their phone. Some people break those restrictions by rooting the device. Android is a modified Linux kernel, so rooting the device will give the user an access to administrative permissions or super user. A rooted device are open to many security risks. A rooted device will not be able to receive software updated via OTA. Use My Root Checker App I have an app that can check if your phone has indication of root (meaning the phone has been tampered). All you have to do is to click on the Google Play badge below, install and open the app on your phone! My root checker app is less than 3mb and it has simple UI. Use The Phone Settings Simply go to your phone settings and search for 'device status&#
Read more

Android Reverse Engineering - Beginners Guide To Smali Coding

Presenting to you a beginners guide to reverse engineer an Android applications. Please use this for learning purposes only. Do not break intellectual properties. Disclaimer: This guide is provided "as is" with no warranties with regard to the accuracy and completeness of the information provided herein. I am not responsible for any bad outcomes you or anyone may have because you followed this guide. When I say beginners, I expect you to have knowledge of some programming language (Java, Kotlin, C#), an inquisitive mind to try things out, and the patience to first google and try to find answers to simple questions. What is Reverse Engineering? Reverse engineering is a process is breaking something down to understand it, build a copy or improve it. This process can be applied to hardware, software, databases or even human DNA. Reverse engineering can be used for many purposes such as a learning tool
Read more

Conquering macOS Upgrades: A Guide for iOS App Developers

Every new macOS update sparks a mix of excitement and trepidation for iOS developers. Sure, there are shiny new features and performance improvements, but lurking beneath the surface might be compatibility gremlins and unforeseen quirks. Fear not, brave coders! With this guide, you'll be navigating macOS upgrades like a seasoned pro, ensuring your apps continue to shine. 1. Xcode & the SDK Tango: First things first: update Xcode . It's the maestro orchestrating your app's development symphony, and keeping it current ensures compatibility with the latest macOS magic. Head to the App Store's Updates tab and let the conductor take its rightful place. Next, grab the newest iOS SDK . Think of it as the sheet music your app dances to. Open Xcode, navigate to Preferences > Locations, and check the "Command Line Tools" box before hitting "Download. " Now, your app has the moves to impress on the latest stage. 2. Compatibility Che
Read more