[Q] Android Apk reverse engineering question - Android Q&A, Help & Troubleshooting

Hi nice to meet you, i am crystalboy87 and this is my first post. I'm very happy to join in this fantastic forum.
Lets start with same question
I have started many month ago to programming android apps (at the moment none of my creation are in the market).
Parallel to this i have start a week ago to learn how to reverse engineer apk and crack it because i want to make an harder protection to my application.
For game and learn i have try with this app that is free:
Efficiency (free) - Nubbu Apps (i can't give a link because i am a new user )
This app have a stupid protection for check if it is the free app or not i an boolean value called Free_App that at the start was initialized to True in the main activity.
I have managed this application with Apktool and get the smali code, after that i have saved it and use xdaAutoTool 4.03 for repack it.
When i try to install the application on my phone (Samsung Galaxy S3) i have this message: Application not istalled (with a cross near this label).
My question is why? When i use the function Recompile-Rebuild all in xdaAutoTool i have all ok.
[*] Processing Efficiency_(Free)_1.6 folder...
-----------------------------------------------------
Recompiling Efficiency_(Free)_1.6.apk...
I: Smaling...
I: Building resources...
I: Building apk file...
DONE!
-----------------------------------------------------
[*] Efficiency_(Free)_1.6.apk
-----------------------------------------------------
Can someone explain to me where i am wrong please?
Thank you

What you describe is an unethical form of reverse engineering called cracking.
There are many better ways to learn reverse engineering.

zgx said:
What you describe is an unethical form of reverse engineering called cracking.
There are many better ways to learn reverse engineering.
Click to expand...
Click to collapse
I disagree with you because if i really want to crack an application, do you think that i will try with a free app?
I am against to piracy, i want to learn only for protect much better my application, and the only way for learn is to try.
The strange thing is also if I don't edit the original code but i only decompile and rebuild this app without touch it's code it doesn't work and give me the error: Application not installed when i try to install in my phone.
Why? There is a type of protection or xdaAutoTool don't work correctly with this app?
Anyone can check and explain to me plese? :fingers-crossed:
Thanks to all

Did you sign the app?

Alot of developers are making their apps non decompilable now. So it just maybe the app. Just a heads up. People will always find a way to crack the app if they want it bad enough
Batcom2

XperienceD said:
Did you sign the app?
Click to expand...
Click to collapse
xdaAutoTool don't sign it in automatic mode when i use Recompile-BuildAll button?
zelendel said:
Alot of developers are making their apps non decompilable now. So it just maybe the app. Just a heads up. People will always find a way to crack the app if they want it bad enough
Batcom2
Click to expand...
Click to collapse
In which mode i can do the same thing? If i want to do an app non decompilable? There are special setting to set in eclipse? If you have more information can you link me something? i will very happy to study and implement this.

crystalboy87 said:
In which mode i can do the same thing? If i want to do an app non decompilable? There are special setting to set in eclipse? If you have more information can you link me something? i will very happy to study and implement this.
Click to expand...
Click to collapse
I am not sure how they do it but this will not prevent it as most cracked apps are done by hex edits and not by decompiling it.

zelendel said:
I am not sure how they do it but this will not prevent it as most cracked apps are done by hex edits and not by decompiling it.
Click to expand...
Click to collapse
Yes i know but it is more difficult such as decompiling the apk and get the source code.
I have another question, in a smali file i have more markers ".line xx" where xx is an integer number that identify the current line of code.
i have try to add custom code in my decompiled application for see if it works but when i rebuild it the app doesn't run on the phone.
There is an explanation? The .line markers are necessary?

crystalboy87 said:
Hi nice to meet you, i am crystalboy87 and this is my first post. I'm very happy to join in this fantastic forum.
Lets start with same question
I have started many month ago to programming android apps (at the moment none of my creation are in the market).
Parallel to this i have start a week ago to learn how to reverse engineer apk and crack it because i want to make an harder protection to my application.
For game and learn i have try with this app that is free:
Efficiency (free) - Nubbu Apps (i can't give a link because i am a new user )
This app have a stupid protection for check if it is the free app or not i an boolean value called Free_App that at the start was initialized to True in the main activity.
I have managed this application with Apktool and get the smali code, after that i have saved it and use xdaAutoTool 4.03 for repack it.
When i try to install the application on my phone (Samsung Galaxy S3) i have this message: Application not istalled (with a cross near this label).
My question is why? When i use the function Recompile-Rebuild all in xdaAutoTool i have all ok.
[*] Processing Efficiency_(Free)_1.6 folder...
-----------------------------------------------------
Recompiling Efficiency_(Free)_1.6.apk...
I: Smaling...
I: Building resources...
I: Building apk file...
DONE!
-----------------------------------------------------
[*] Efficiency_(Free)_1.6.apk
-----------------------------------------------------
Can someone explain to me where i am wrong please?
Thank you
Click to expand...
Click to collapse
You can try 'Anti Decompiler(Android)Trial' on google play for protecting your project .
https://play.google.com/store/apps/details?id=com.tth.AntilDecompilerTrial
'Anti decomplier (android)' App uses a new approach for protection, it protects your android app at source code level

Related

[Q] Anyone thought of making a smali plugin for intellij idea or eclipse?

Title says most of it, but has anyone considered making a plugin for either IDE to make it easier to work with smali (tracing through methods so you can ctrl+click on them to find where they area located, intellisense, syntax highlighting, dependency checking, etc?
I don't have any experience building FOR IDEs, but that's certainly something I'd be willing to test. It could probably be another command line tool, but it has to start somewhere; I run apktool in VMware Xubuntu and my IDEs in Windows (or OSX)...
android-studio
Now that android-studio, which is IntelliJ IDEA with android plug-ins, becomes Google's new standard IDE, the idea gets more interesting again. I just started exploring the Xposed framework, and a plug-in for android-studio offering even code completion to Xposed helpers and functions based on smali code would be awesome and something I'd be willing to help developing
For pure reverse-engineering I know that many like Virtuous Ten Studio. But I see the future in App modding using the Xposed framework. Just much more transparent and portable! As an example, I use Whatsapp+ - but I only get updates when the Whatsapp+ dev has time to decompile an upstream Whatsapp update, applies his mods again, compiles it, and releases it. Now if he rewrote Whatsapp+ as a Xposed mod that would mod the original Whatsapp app, that would be different, as the mod would probably immediately work for an update, too.
Oh and also, Virtuous Ten Studio is Windows software. I am a pure Linux user, and IntelliJ works on all major platforms, so this is another advantage
stammler said:
But I see the future in App modding using the Xposed framework. Just much more transparent and portable!
Click to expand...
Click to collapse
There is another runtime modification framework called cydia substrate by Jay Freeman aka Saurik. Before anyone cries foul and claims all that Jay did was copy Xposed please have a read of Jay Freeman's well written description of cydia substrate.
Since I cannot post links because of some anti-spam policy, please find the link by searching for 'cydia substrate vs xposed' in google. One of the first hits you will find is on the cydiasubstrate domain.
I agree with you; runtime modification is definitely where the future is for modifications.
infamousity said:
There is another runtime modification framework called cydia substrate by Jay Freeman aka Saurik. Before anyone cries foul and claims all that Jay did was copy Xposed please have a read of Jay Freeman's well written description of cydia substrate.
Since I cannot post links because of some anti-spam policy, please find the link by searching for 'cydia substrate vs xposed' in google. One of the first hits you will find is on the cydiasubstrate domain.
I agree with you; runtime modification is definitely where the future is for modifications.
Click to expand...
Click to collapse
I know about substrate, just by accident happened to start coding with Xposed. But I actually don't care, may the better framework win So let me restate what I said, just like you said, to runtime modification is where the future for modding is heading

[Q] Help a non-developer out with a slight signing issue

Hi folks,
I need help with an app I've created. First, it's worth mentioning that I'm not a developer (I'm a graphic designer) and I've created the app today with Conduit Mobile, an easy app dev platform for noobs like myself. We're initially using this app to see if it gains enough interest to justify hiring a real life developer.
During compiling the app, Conduit messed two things up. The app PNG icon no longer has a clear background and the splash screen has been stretched and watermarked with their logo.
So I figured I'd just open the APK in WinRAR and replace the two images.
Obviously now installation fails and I can't reupload the modified APK to the Play Store and I'm guessing that's to do with signing?
I've tried three different signing methods but honestly I have no idea what I'm doing, or even why.
Any help would be appreciated.
https://play.google.com/store/apps/...16.app&feature=nav_result#?t=W251bGwsMSwyLDNd
Do not modify the png file names.
Sign it with eclipse and download android sdk
Jrcon said:
Do not modify the png file names.
Sign it with eclipse and download android sdk
Click to expand...
Click to collapse
I haven't modified the PNG names. I already have the SDK and just installed Eclipse but I still have no idea.
I don't mind if someone wants to do it for me! I'll buy you a beer.
www.dnbr.org/app/DNBR Mobile 0.5.1.apk
Edit: I'm a genius. I done it with a little android app called ZipSigner 2
Double Edit: **** knows!

What do you think?

Hello guys, I had an idea and wanted to discuss it with you people that you are definitely more experienced than me, I was wondering if it was possible to create a single apk which is the ROM, or this apk should include the bootanimation, and the launcher would be the apk (or rather a activity in it) ditto for SystemUI framework-res or for short, this apk should consist of the various components that make up a normal ROM, all in one file (except, I think for the folder META-INF because that is read, as far as I know, the default of any recovery, or should create a recovery made ​​on purpose), the benefits would be many of the small size of the system, the speed, the "simplicity" of programming (think that should be programmed to a single apk with all the functions of a system and not to distribute all in many files), but then I came effettivamante doubt that this is not feasible, and so I wondered if you could do the same thing but only for apk (those contained in the app folder)
So what do you think?Is feasible?
No.
R: What do you think?
luxifr said:
No.
Click to expand...
Click to collapse
Why?
UP!! someone might be a little more precise
---blacksoul--- said:
UP!! someone might be a little more precise
Click to expand...
Click to collapse
Don't bump your own thread. Why on earth would we even want to do it? It would increase the size of the ROM, make it extremely hard to debug, and I'm not even sure how it could hypothetically work.
"Joining" all the system apps is certainly possible.
But:
-Seperate apps can be supported and updated better
-One APK with ALL THOSE THOUSENDS of Java code lines is VERY messy
-Compiling it would take long , very long - less attractive to developers
-I can think of much more, but it isn't of any use so I'll stop here.
Cy
Sent from my Galaxy Nexus running Android 4.2 JB
I'll add one other...
You'd still need an underlying file system since Android/Java are interpreted languages and require an interpreter to execute the code.

[Q] apk modding question

hello. i am interested in how to mod an apk for offline capability.
for example, Asphalt 8 game, is now version 1.2.1b i have searched offline mods, i only find "unlimited money". i just want offline, no money, no nothing.
i have apktool, i have java development, i have signapk, i have software for apk midification. can you guys help me? either make my apk offline, or tell me how to do it?
It's not simple and depends on the app. If you're asking I suppose you have no idea how an app actually works? If so, there isn't much you can do…
Basically, you need to look for the relevant checks and modify/remove them.
GermainZ said:
It's not simple and depends on the app. If you're asking I suppose you have no idea how an app actually works? If so, there isn't much you can do…
Basically, you need to look for the relevant checks and modify/remove them.
Click to expand...
Click to collapse
i do know how apk's work, in fact i have decompiled and modified a fiew, signed and all such. but only minor stuff in resources or xml. i did not touch the smali. now the problem is i have no idea for what strings to search. except the "enable internet check" and some lines. but i suspect that's not all. because after i modified that, the building gave me 6 errors.

Google apps decompile & recompile

Firstly I would like to apologise if I am asking my question in the wrong area. If so then I am happy for a moderator to move to the correct location.
I have some understanding of how to decompile apps, modify and then recompile. All my work is done using APKTool via a command line and a test keystore that I found in a tutorial. I've even recently learnt how to create my own keystore using the Java Keytool. The vast majority of the time I am able to accomplish what I want, by this I mean making small amendments to the code (.xml & .smali) to suit my preference - usually little things such as correcting typos. I am however struggling with Google apps, such as Messenger, Hangouts etc. The process I am carrying out is correct, the app even installs correctly on my Android device. However upon launching the app it will then just crash.
My question is, do Google prevent their apps from being reverse engineered using special tools? I there something else I should be taking into consideration when dealing with Google apps?
Any help is greatly appreciated.
Thank you

Categories

Resources