Reverse Engineering is not just for hackers
summary
Shows how to grab an APK from a device with adb, use aapt to dump manifest and strings, use apktool to decode resources and rebuild a debuggable APK, and use an Androguard interactive shell or JADX/Smali flow to inspect classes.dex and step through decompiled code. Demonstrates finding hardcoded keys, third‑party SDKs, and leftover developer files, rebuilding and resigning to debug, and how ProGuard/DexGuard can still leak structure when packages are organized by feature.
AI-written summary · about
chapters (17)
- 0:00Start
- 2:10Why that permission?
- 2:32Why is this crashing?
- 3:28How did they do that?
- 4:40Get the APK
- 6:29aapt
- 11:02basic tools
- 12:31apktool
- 15:19androguard
- 19:17ClassyShark
- 20:40CodeInspect
- 23:14Other Play Store Apps
- 24:05Santoku
- 25:08IDA Pro
- 25:46JEB / JEB2
- 27:28Security
- 31:33Compromised Obfuscation
related talks
21mReverse-Engineering apps on the device - how far can we go?
45mReverse engineering mobile apps: how, why, and what now?
33mReverse - Engineering apps on the device - how far can we go?
29mA day in the life of a mobile reverse engineer
14mBeginners Guide to Reverse Engineering Android Apps
47mAttacking Android Applications
37mThe Art of Hiding Sensitive Info in Plain Sight
43mBreak your app before someone else does