~/talk

Hide Android Applications in Images

on YouTube 22m
Talkat Black Hat Europe 2014 · 2014-10-14..10-17· [security, android]

speaker

name:Axelle Apvrille
links:none on file

resources

video:https://youtu.be/hajOlvLhYJY
slides:none on file

summary

Demonstrates a working proof‑of‑concept that encrypts an APK with AES CBC IV and crafts the ciphertext to match a target PNG so the file is both a valid image and an installable Android package; uses a dummy PNG chunk to carry the encrypted payload, appends zip data after the end of central directory, and computes IV/plaintext adjustments so decryption yields the original APK. Works on Android 4.4.2 emulator, installs the hidden payload (demo used Anakin Skywalker image).

AI-written summary · about

chapters (5)

  1. 0:00Start
  2. 3:29Demo
  3. 4:06Proof-of-Concept Application
  4. 5:25Decompile Code
  5. 15:40Cipher Block Chaining

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.