Questions tagged [android]

Android is Google's Linux-based operating system for mobile devices. Initially developed by Android, Inc., Android is the world's most widely used smartphone platform.

Android is Google's software stack for mobile devices, developed by Google and the Open Handset Alliance. For non-reverse engineering questions, see the Android Enthusiasts Stack Exchange site.

From Wikipedia:

Android is a Linux-based operating system designed primarily for touchscreen mobile devices such as smartphones and tablet computers. Initially developed by Android, Inc., which Google backed financially and later bought in 2005, Android was unveiled in 2007 along with the founding of the Open Handset Alliance: a consortium of hardware, software, and telecommunication companies devoted to advancing open standards for mobile devices. The first Android-powered phone was sold in October 2008.

Android is open source and Google releases the code under the Apache License. This open source code and permissive licensing allows the software to be freely modified and distributed by device manufacturers, wireless carriers and enthusiast developers. Additionally, Android has a large community of developers writing applications ("apps") that extend the functionality of devices, written primarily in a customized version of the Java programming language. In October 2012, there were approximately 700,000 apps available for Android, and the estimated number of applications downloaded from Google Play, Android's primary app store, was 25 billion.

Android Versions

Official API Documentation

Applications

Source code and Building

Developers

For non-developer questions, see the Android Enthusiasts Stack Exchange site.

Free Android Programming Books

Android Development Book Recommendations

403 questions
25
votes
6 answers

How do I analyze a .apk file and understand its working?

I am an Android app developer, and recently I encountered a problem with in-app purchase. I discovered that in some apps, in-app purchases can be done for free using this application. I know this app generates free cards but the proportion of free…
Tirath
  • 359
  • 1
  • 2
  • 5
4
votes
2 answers

How to encode file

I am trying to decrypt a lua file which has been encrypting using a key. Some background to the lua file. Its from an android I decompiled the APK and found that all the lua files are encrypted.
Neit
  • 41
  • 5
3
votes
1 answer

Reverse engineering from an APK file to a project by MAC

I accidentally erased my project from Eclipse, and all I have left is the APK file which I transferred to my phone. Is there a way to reverse the process of exporting an application to the .apk file, so I can get my project back? by using MacOS X ?
user3234456
  • 33
  • 1
  • 3
3
votes
0 answers

Flashed "compatible" firmware onto two generic Allwinner A50 tablets

I'm already at least 3 days on this and can't find a way out. I'm still unsure if it fits here, but here we go! I have 3 A50 Allwinner tablets (HOW HT-705XT) that I wanted to root. Since the only way was patching a boot.img obtained from the web, I…
Fusseldieb
  • 51
  • 6
3
votes
1 answer

Is is possible to get versioncode and version number of an app in Google Play?

I want to get version code and version number of an app via API from Google Play, but some apps don't have it via google play website. You have to enter via Google Play app and then you can get version number. I suppose it use device id to supply…
leomark
  • 31
  • 1
  • 2
3
votes
1 answer

Proper way of implementing DexGuard RASP device checks

I recently came across an app that is protected with DexGuard. DexGuard claims to offer Runtime Application Self Protection (RASP), which comprises of app obfuscation and various runtime tampering checks (anti…
user1118764
  • 359
  • 1
  • 5
  • 9
3
votes
1 answer

Where is Android binary XML format documented?

This format is always trouble for reverse engeneering. When there are question about binary XML, the usual answer is "use apktool" (or something similar). However, no tool is perfect; actually all suggested tools are more or less buggy, and I don't…
Vitalii
  • 395
  • 2
  • 14
3
votes
2 answers

Firestick get application binary

I would like to reverse engineer and ultimately patch an application on my Amazon Firestick. To doo this, I want to analyze the app executable. I believe third-party apk's are stored in the /data directory but this directory is not readable on an…
genghiskhan
  • 378
  • 2
  • 10
3
votes
1 answer

How to find image base of an arbitrary boot-loader image?

I have picked up a rooted Acer phone and dd-ed the LK partition to analyze it in IDA. The goal is to pinpoint the routine processing fastboot commands. Stripping first 512 bytes produces apparently meaningful disassembly. However, the cross…
sherlock
  • 1,381
  • 3
  • 23
  • 40
3
votes
2 answers

Reverse engineering an application's client connection to a host

Ok guys, I'm a web programmer but I'm completely new to reverse engineering.. So, there's this android app called InstaMessage, I'd like to reverse engineer the client's connection to the server, so that I can emulate it on my computer and see what…
sigmaxf
  • 155
  • 1
  • 5
2
votes
1 answer

Android malware reversing : constant values

I was trying to reverse engineer an Android Malware sample and I find the following sample when decompiling the jar file I obtained by running dex2jar. if (i >= paramBundle.length()) { …
user1743
2
votes
1 answer

Android priority values

Reversing some Android malware I see that it sets android:priority to 10000 in the AndroidManifest.xml file. Looking at the Android Documentation I see that it needs a value > -1000 and < 1000. How does this work? Is 10000 a valid priority value?…
user1743
2
votes
0 answers

How to encode file lua and resource files

I am trying to decrypt luas files it use cocos2dx but its encrypted maybe aes encryption. With frida i can extract most lua files but not all. And with ida64 i cant find the key.
xbuyk987
  • 53
  • 4
2
votes
0 answers

SSL Pinning React Native

I'm trying to remove SSL pinning with Android device. I've tried different techniques like hooking the app with Objection, re-pinning with Frida, using the SSLUnpinning app from the Xposed repo, etc. but nothing seemed to work. The library used is…
moskino11
2
votes
0 answers

Need help injecting SSID into Momentum app checking for device wifi

Hello so I'm trying to add a device onto my Genymotion emulated device but to add it the app needs to detect the AP. this is the logcat of just the apps logs If anyone can help let me know im trying to find how to inject that the SSID was matched.
1
2 3 4