Reverse and Inject
summary
Shows concrete toolkit and two live demos: using APKTool and JEX for decompiling and JADX/JD GUI to inspect minified code, Ghidra/IDA for .so disassembly, and the runtime hooker Freda hooks intent.getStringExtra with JavaScript to overwrite values; demonstrates decompiling an APK, injecting a boot/broadcast receiver Smali payload, repackaging, resigning and installing to prove the injected toast and altered behavior, and explains static vs dynamic analysis, Smali/DEX steps, and common client-side flaws found.
AI-written summary · about
chapters (16)
- 0:00Introduction and overview
- 1:05Tools and terminology
- 3:12Static analysis basics
- 5:45Disassemblers overview
- 6:53Dynamic analysis with Frida
- 8:16Android app structure
- 9:39Java vs Android compilation
- 11:50Reverse engineering demo
- 13:18Native code disassembly
- 15:06Frida deep dive
- 16:52Frida scripting demo
- 23:27Frida on non-rooted devices
- 25:56Common app vulnerabilities
- 26:59Capture the Flag challenges
- 28:04Repackaging and injection demo
- 31:39Q&A session
related talks
29mA Day in the Life of a Mobile Malware Reverse Engineer
29mA day in the life of a mobile reverse engineer
33mReverse - Engineering apps on the device - how far can we go?
38mReverse Engineering is not just for hackers
53mAndroid: He protec, but he also attac
47mAttacking Android Applications
38mHack and Protect Your App
43mAttacking Android Applications