(Android) Transformers - bytecode in disguise!
summary
Explains how Firebase Performance finds every HTTP call by rewriting compiled classes at build time using the Android Transform API and ASM rather than runtime agents, changing invokevirtual calls (e.g. URL.openConnection) into invokestatic calls that forward into a small companion runtime which decorates URLConnection to count bytes and timings, supports URLConnection/Apache/OkHttp, requires incremental transforms for speed, and warns never to transform the companion library to avoid infinite loops; includes an open source sample.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:20Firebase Performance Monitoring
- 11:40Gradle Transform API
- 14:06Bytecode manipulation with ASM
- 23:08Finding HTTP transaction patterns
- 26:16Redirecting method calls
- 33:35Runtime instrumentation
- 34:15Tips for writing transforms
related talks
34m(Android) Transformers - Bytecode in Disguise!
45mImpact of Framework Choice on your Application: A Reverse Engineering Perspective
45mReverse engineering mobile apps: how, why, and what now?
47mAttacking Android Applications
36mMaster the Art of Code Obfuscation from Simple to Advanced
53mAndroid: He protec, but he also attac
32mThree ways to use AI on Android: The Good, the Bad and the Ugly
29mEndoscope: Unpacking Android Apps with VM-Based Obfuscation