Dismantling droids for breakfast
summary
CodeInspect is an Eclipse-based reverse‑engineering environment built on the Soot framework and a human‑readable chimple IR that provides interactive debugging on bytecode, renaming of obfuscated identifiers, on‑the‑fly insertion of Java source, and bytecode rewriting. It adds plugins for precise taint/data‑flow tracking (FlowDroid), automatic de‑obfuscation of reflective calls and string recovery. Demonstrated on a Korean banking trojan that hit ~20,000 users, the tool extracts hardcoded SMTP credentials and bypasses emulator checks by editing the bytecode and stepping through live execution.
AI-written summary · about
chapters (8)
- 0:00Start
- 4:37Code Inspect
- 6:15The Suit Framework
- 7:30Code Manipulation
- 10:53Code Inspector
- 13:40Plugins
- 21:48Debugging
- 31:44Change the Source Code
related talks
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
45m"Advanced Malware Threat: handling obfuscated code using..."
31mDABiD: The Powerful Interactive Android Debugger for Android Malware Analysis
41mTrueseeing: Effective Dataflow Analysis over Dalvik Opcodes
29mA Day in the Life of a Mobile Malware Reverse Engineer
29mEndoscope: Unpacking Android Apps with VM-Based Obfuscation
01h 46mTutorial: Introduction to Reverse Engineering
15mInvestigating Internals With Stoic