DABiD: The Powerful Interactive Android Debugger for Android Malware Analysis
summary
DABiD is an interactive Android binary debugger that runs on a smartphone without root and implements three concrete capabilities: detects runtime code writes (self-modifying DEX bytes) and alerts the debugger, dumps new dexes in memory when classes dynamically load, and lets analysts write bytes to memory to modify execution flow on the fly. It automates turning APKs debuggable, signing/installing, JDWP connection setup, and reconstructs register values by pre-emulating to produce debug symbols; demos show live debugging of modified and injected code.
AI-written summary · about
chapters (5)
- 0:00Traditional Android debugging
- 6:47Challenges in memory
- 9:06Introducing Davit debugger
- 16:30Demonstration of features
- 29:18Future work and conclusion
related talks
40mDynamic Binary Instrumentation Techniques to Address Native Code Obfuscation
47mAttacking Android Applications
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
29mBytecode analysis for everyone!
36mDAAS: Debugging as a skill!
47mMagic of ADB and Android shell
38mReverse Engineering is not just for hackers
44mAuditing Your APKs Like a Black Hat Hacker