All Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
summary
A binary analysis IDE called CodeInspect imports APKs, shows Jimple IR from the Soot framework, and lets an analyst set breakpoints, patch out emulator checks, inspect native-returned strings, and inject or remove code. A live demo dissects a Korean banking Trojan that infects about 20,000 phones, intercepts SMS and exfiltrates credentials via HTTP and email, and reveals hidden APKs and native libraries. A study with backend providers finds over 80 million records and 56 million exposed items due to hardcoded credentials, and the tool’s dataflow plugin traces exfiltration paths.
AI-written summary · about
chapters (19)
- 0:00Intro
- 2:11The Play Store Model
- 3:11Pirated Apps
- 4:10CodeInspect
- 10:36Protection Against Reverse Engineering
- 12:18Architecture
- 19:38Malware
- 25:08Import APK
- 26:30Resources
- 27:31Permissions
- 28:25MainActivity
- 29:38Debugging
- 33:28SMS Receiving
- 41:11Copyright Laws
- 41:58Open Source
- 42:35Backend
- 44:24String Encryption
- 45:46Source Mode
- 46:21Commercialization
related talks
44mAuditing Your APKs Like a Black Hat Hacker
47mAttacking Android Applications
37mDismantling droids for breakfast
37mThe Art of Hiding Sensitive Info in Plain Sight
53mAndroid: He protec, but he also attac
29mA day in the life of a mobile reverse engineer
28mSecure Development whit Android
29mA Day in the Life of a Mobile Malware Reverse Engineer