SlideShare a Scribd company logo

Dissecting Android APK

Download as PPTX, PDF
C
Cysinfo Cyber Security Community

This document provides an overview of reversing Android applications. It discusses the Android security model including permissions and ARM TrustZone. It describes real world Android malware like ransomware and data stealing malware. The structure of an Android APK file is explained including the dex, resources, libraries and manifest. Tools for analyzing APKs are introduced, like APKTool for decompiling and Dex2Jar for extracting dex files. The document demonstrates decompiling an APK and analyzing the smali code. It provides a glossary of related terms and references for further reading.

Software
1 of 29
Downloaded 21 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
Dissecting Android APK Reversing Android applications
/> self.me - Final year undergraduate student at Amrita University, Amritapuri - Love Android ! - Currently researching on Android security - Play CTFs as a part of team bi0s
bi0s
Index - Why Android ? - Android security implementations and issues - Real world Android malwares - Reversing Android apps - Structure of an APK - Analyzing the contents
Why Android ? The Tale of Triumph Open source - power to you! User-friendly Most used - more developers
Mobile OS Global Market Share 2016
Android security - Sandboxing - Permissions - ASLR since Android 4.0 ICS - ARM TrustZone Implementations
Permissions
ARM TrustZone
Are we at risk ?
Issues - Malwares - Ransomwares - Exploits
Real world Android malwares
AccuTrack : Turns an Android device into a GPS tracker AckPost : Steals contact information from the device and sends it to a remote server BackFlash / Crosate : Installs as a fake Flash plugin, registers as a Device administrator, and steals sensitive data BankBot : Particularly aims at stealing bank account information from dedicated apps DroidDeluxe : Exploits the device to gain root privilege and then modifies access permission of database files and collects account information
APK Android package : APK Zip file with .apk extension Playstore, Amazon Appstore, F-Droid Java + res + XML + Libs Android PacKage
Making of an APK
Reversing Android apps Tools and Methodologies
APKTOOL Reversing APKs - Compile/decompile apps - Smali code - To modify apps
Structure of an APK
assets - all the unmodified app contents AndroidManifest.xml - Generic; The app-map classes.dex - Java files’ package. The Dalvik executable [ yeah! the source ] res - All the resources ( drawables, icons, values ) lib - External/custom native libraries Resources.asrc - Compiled resources / binaries META-INF - Certificates
Dalvik / ART → JVM redefined → Dalvik until 4.4.4 Kitkat. ART from 5.0 Lollipop → Executes dex → Dalvik - JIT, ART - AOT
DEX Dalvik Executable > Dalvik’s bytecode > java classes > Easy to debug
Tools
ADB Android Debug Bridge - Android tool - Drop shells, files - Access partitions - Install applications
Dex2Jar The source - Small in size - Any platform - Extracts compiled classes out of the dex - Easy to use
Demo
Workaround ? → Check permissions → Trusted app sources → Use ‘ anti-malware ’ apps
Glossary - aapt : Android Asset Packaging Tool. - dex : Dalvik executable. - dx : Tool within the Android SDK used to convert the jar files into dex files. - R.java : A class with static methods to reference all the resources.
In-depth Introduction to Android Permission Model Android Internals by Karim Yaghmour Logcat Security Issue Dalvik and ART Dex2jar, ADB, APK Tool DexGuard obfuscator Dalvik opcodes OWASP Seraphimdroid References
Thank You

More Related Content

PDF
Buffer Overflow Attacks
securityxploded
 
PPTX
Reversing malware analysis training part11 exploit development advanced
Cysinfo Cyber Security Community
 
PPTX
Reversing malware analysis training part6 practical reversing
Cysinfo Cyber Security Community
 
PPTX
Advanced Malware Analysis Training Session 2 - Botnet Analysis Part 1
securityxploded
 
PPTX
Reversing malware analysis training part10 exploit development basics
Cysinfo Cyber Security Community
 
PPTX
Reversing malware analysis training part1 lab setup guide
Cysinfo Cyber Security Community
 
PPTX
Advanced Malware Analysis Training Session 6 - Malware Sandbox Analysis
securityxploded
 
PPTX
Advanced Malware Analysis Training Session 5 - Reversing Automation
securityxploded
 
Buffer Overflow Attacks
securityxploded
 
Reversing malware analysis training part11 exploit development advanced
Cysinfo Cyber Security Community
 
Reversing malware analysis training part6 practical reversing
Cysinfo Cyber Security Community
 
Advanced Malware Analysis Training Session 2 - Botnet Analysis Part 1
securityxploded
 
Reversing malware analysis training part10 exploit development basics
Cysinfo Cyber Security Community
 
Reversing malware analysis training part1 lab setup guide
Cysinfo Cyber Security Community
 
Advanced Malware Analysis Training Session 6 - Malware Sandbox Analysis
securityxploded
 
Advanced Malware Analysis Training Session 5 - Reversing Automation
securityxploded
 

What's hot (20)

PPTX
Dll preloading-attack
Cysinfo Cyber Security Community
 
PPTX
Advanced malware analysis training session8 introduction to android
Cysinfo Cyber Security Community
 
PPTX
Hunting Rootkit From the Dark Corners Of Memory
securityxploded
 
PPTX
Reversing & malware analysis training part 1 lab setup guide
securityxploded
 
PPTX
Reversing malware analysis training part7 unpackingupx
Cysinfo Cyber Security Community
 
PPTX
Reversing malware analysis training part2 introduction to windows internals
Cysinfo Cyber Security Community
 
PPTX
Reversing & malware analysis training part 2 introduction to windows internals
securityxploded
 
PPTX
Reversing malware analysis trainingpart9 advanced malware analysis
Cysinfo Cyber Security Community
 
PPTX
Reversing & malware analysis training part 3 windows pe file format basics
securityxploded
 
PPTX
Advanced Malware Analysis Training Session 7 - Malware Memory Forensics
securityxploded
 
PPTX
Anti-Virus Evasion Techniques and Countermeasures
n|u - The Open Security Community
 
PPTX
Reversing & Malware Analysis Training Part 11 - Exploit Development [Advanced]
securityxploded
 
PPTX
Advanced Malware Analysis Training Session 3 - Botnet Analysis Part 2
securityxploded
 
PDF
IOT Exploitation
Cysinfo Cyber Security Community
 
PPTX
Reversing & Malware Analysis Training Part 13 - Future Roadmap
securityxploded
 
PDF
Introduction to iOS Penetration Testing
OWASP
 
PPTX
Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysis
securityxploded
 
PPTX
Advanced Malware Analysis Training Session 11 - (Part 2) Dissecting the Heart...
securityxploded
 
PPTX
Advanced Malware Analysis Training Session 1 - Detection and Removal of Malwares
securityxploded
 
PPTX
Basic Malware Analysis
Albert Hui
 
Dll preloading-attack
Cysinfo Cyber Security Community
 
Advanced malware analysis training session8 introduction to android
Cysinfo Cyber Security Community
 
Hunting Rootkit From the Dark Corners Of Memory
securityxploded
 
Reversing & malware analysis training part 1 lab setup guide
securityxploded
 
Reversing malware analysis training part7 unpackingupx
Cysinfo Cyber Security Community
 
Reversing malware analysis training part2 introduction to windows internals
Cysinfo Cyber Security Community
 
Reversing & malware analysis training part 2 introduction to windows internals
securityxploded
 
Reversing malware analysis trainingpart9 advanced malware analysis
Cysinfo Cyber Security Community
 
Reversing & malware analysis training part 3 windows pe file format basics
securityxploded
 
Advanced Malware Analysis Training Session 7 - Malware Memory Forensics
securityxploded
 
Anti-Virus Evasion Techniques and Countermeasures
n|u - The Open Security Community
 
Reversing & Malware Analysis Training Part 11 - Exploit Development [Advanced]
securityxploded
 
Advanced Malware Analysis Training Session 3 - Botnet Analysis Part 2
securityxploded
 
IOT Exploitation
Cysinfo Cyber Security Community
 
Reversing & Malware Analysis Training Part 13 - Future Roadmap
securityxploded
 
Introduction to iOS Penetration Testing
OWASP
 
Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysis
securityxploded
 
Advanced Malware Analysis Training Session 11 - (Part 2) Dissecting the Heart...
securityxploded
 
Advanced Malware Analysis Training Session 1 - Detection and Removal of Malwares
securityxploded
 
Basic Malware Analysis
Albert Hui
 
Ad

Viewers also liked (20)

PDF
Investigating Malicious Office Documents: Analyzing Macros Malwares used in C...
Cysinfo Cyber Security Community
 
PDF
Buffer overflow Attacks
Cysinfo Cyber Security Community
 
PPTX
Watering hole attacks case study analysis
Cysinfo Cyber Security Community
 
PPTX
Return address
Cysinfo Cyber Security Community
 
PDF
Dynamic Binary Instrumentation
Cysinfo Cyber Security Community
 
PDF
Format string vunerability
Cysinfo Cyber Security Community
 
PPTX
Homomorphic encryption
Cysinfo Cyber Security Community
 
PPTX
Advanced malware analysis training session11 part2 dissecting the heart beat ...
Cysinfo Cyber Security Community
 
PPTX
Investigating Malware using Memory Forensics
Cysinfo Cyber Security Community
 
ODP
Introduction to Binary Exploitation
Cysinfo Cyber Security Community
 
PPTX
Advanced malwareanalysis training session2 botnet analysis part1
Cysinfo Cyber Security Community
 
PPTX
Advanced malware analysis training session3 botnet analysis part2
Cysinfo Cyber Security Community
 
PPTX
Exploits & Mitigations - Memory Corruption Techniques
Cysinfo Cyber Security Community
 
PDF
POS Malware: Is your Debit/Credit Transcations Secure?
Cysinfo Cyber Security Community
 
PPTX
Introduction to ICS/SCADA security
Cysinfo Cyber Security Community
 
PPTX
Hunting rootkit from dark corners of memory
Cysinfo Cyber Security Community
 
PDF
Understanding APT1 malware techniques using malware analysis and reverse engi...
Cysinfo Cyber Security Community
 
PPTX
XXE - XML External Entity Attack
Cysinfo Cyber Security Community
 
PDF
Linux Malware Analysis
Cysinfo Cyber Security Community
 
PDF
ATM Malware: Understanding the threat
Cysinfo Cyber Security Community
 
Investigating Malicious Office Documents: Analyzing Macros Malwares used in C...
Cysinfo Cyber Security Community
 
Buffer overflow Attacks
Cysinfo Cyber Security Community
 
Watering hole attacks case study analysis
Cysinfo Cyber Security Community
 
Return address
Cysinfo Cyber Security Community
 
Dynamic Binary Instrumentation
Cysinfo Cyber Security Community
 
Format string vunerability
Cysinfo Cyber Security Community
 
Homomorphic encryption
Cysinfo Cyber Security Community
 
Advanced malware analysis training session11 part2 dissecting the heart beat ...
Cysinfo Cyber Security Community
 
Investigating Malware using Memory Forensics
Cysinfo Cyber Security Community
 
Introduction to Binary Exploitation
Cysinfo Cyber Security Community
 
Advanced malwareanalysis training session2 botnet analysis part1
Cysinfo Cyber Security Community
 
Advanced malware analysis training session3 botnet analysis part2
Cysinfo Cyber Security Community
 
Exploits & Mitigations - Memory Corruption Techniques
Cysinfo Cyber Security Community
 
POS Malware: Is your Debit/Credit Transcations Secure?
Cysinfo Cyber Security Community
 
Introduction to ICS/SCADA security
Cysinfo Cyber Security Community
 
Hunting rootkit from dark corners of memory
Cysinfo Cyber Security Community
 
Understanding APT1 malware techniques using malware analysis and reverse engi...
Cysinfo Cyber Security Community
 
XXE - XML External Entity Attack
Cysinfo Cyber Security Community
 
Linux Malware Analysis
Cysinfo Cyber Security Community
 
ATM Malware: Understanding the threat
Cysinfo Cyber Security Community
 
Ad

Similar to Dissecting Android APK (20)

PDF
Null Mumbai Meet_Android Reverse Engineering by Samrat Das
nullowaspmumbai
 
PDF
Hacking your Droid (Aditya Gupta)
ClubHack
 
PDF
Getting started with Android pentesting
Minali Arora
 
PDF
Andriod Pentesting and Malware Analysis
n|u - The Open Security Community
 
PDF
Droidcon Greece '15 - Reverse Engineering in Android: Countermeasures and Tools
Dario Incalza
 
PPTX
Mobile Application Penetration Testing - Android
UtpalSwain2
 
PPTX
Getting started with android
Vandana Verma
 
PDF
Building Custom Android Malware BruCON 2013
Stephan Chenette
 
PPTX
Introduction to Android Development Part 1
Kainda Kiniel Daka
 
PDF
Android_Malware_IOAsis_2014_Analysis.pdf
jjb117343
 
PPTX
Manish Chasta - Securing Android Applications
Positive Hack Days
 
PPTX
Pentesting iOS Applications
jasonhaddix
 
PPTX
3. Android Architecture.pptx
HarshiniB11
 
PPTX
Android Penetration testing - Day 2
Mohammed Adam
 
PPTX
Android security by ravi-rai
Ravi Rai
 
PPT
Android For Java Developers
Mike Wolfson
 
PDF
Reading Group Presentation: Why Eve and Mallory Love Android
Michael Rushanan
 
PPTX
Null mumbai-Android-Insecure-Data-Storage-Exploitation
Nitesh Malviya
 
PDF
2013 Toorcon San Diego Building Custom Android Malware for Penetration Testing
Stephan Chenette
 
PPTX
Notes Unit2.pptx
MIT Autonomous Aurangabad
 
Null Mumbai Meet_Android Reverse Engineering by Samrat Das
nullowaspmumbai
 
Hacking your Droid (Aditya Gupta)
ClubHack
 
Getting started with Android pentesting
Minali Arora
 
Andriod Pentesting and Malware Analysis
n|u - The Open Security Community
 
Droidcon Greece '15 - Reverse Engineering in Android: Countermeasures and Tools
Dario Incalza
 
Mobile Application Penetration Testing - Android
UtpalSwain2
 
Getting started with android
Vandana Verma
 
Building Custom Android Malware BruCON 2013
Stephan Chenette
 
Introduction to Android Development Part 1
Kainda Kiniel Daka
 
Android_Malware_IOAsis_2014_Analysis.pdf
jjb117343
 
Manish Chasta - Securing Android Applications
Positive Hack Days
 
Pentesting iOS Applications
jasonhaddix
 
3. Android Architecture.pptx
HarshiniB11
 
Android Penetration testing - Day 2
Mohammed Adam
 
Android security by ravi-rai
Ravi Rai
 
Android For Java Developers
Mike Wolfson
 
Reading Group Presentation: Why Eve and Mallory Love Android
Michael Rushanan
 
Null mumbai-Android-Insecure-Data-Storage-Exploitation
Nitesh Malviya
 
2013 Toorcon San Diego Building Custom Android Malware for Penetration Testing
Stephan Chenette
 
Notes Unit2.pptx
MIT Autonomous Aurangabad
 

More from Cysinfo Cyber Security Community (20)

PDF
Understanding Malware Persistence Techniques by Monnappa K A
Cysinfo Cyber Security Community
 
PDF
Understanding & analyzing obfuscated malicious web scripts by Vikram Kharvi
Cysinfo Cyber Security Community
 
PDF
Getting started with cybersecurity through CTFs by Shruti Dixit & Geethna TK
Cysinfo Cyber Security Community
 
PPTX
Emerging Trends in Cybersecurity by Amar Prusty
Cysinfo Cyber Security Community
 
PDF
A look into the sanitizer family (ASAN & UBSAN) by Akul Pillai
Cysinfo Cyber Security Community
 
PDF
Closer look at PHP Unserialization by Ashwin Shenoi
Cysinfo Cyber Security Community
 
PDF
Unicorn: The Ultimate CPU Emulator by Akshay Ajayan
Cysinfo Cyber Security Community
 
PDF
The Art of Executing JavaScript by Akhil Mahendra
Cysinfo Cyber Security Community
 
PDF
Reversing and Decrypting Malware Communications by Monnappa
Cysinfo Cyber Security Community
 
PPTX
DeViL - Detect Virtual Machine in Linux by Sreelakshmi
Cysinfo Cyber Security Community
 
PPTX
Analysis of android apk using adhrit by Abhishek J.M
Cysinfo Cyber Security Community
 
PDF
Understanding evasive hollow process injection techniques monnappa k a
Cysinfo Cyber Security Community
 
PPTX
Security challenges in d2d communication by ajithkumar vyasarao
Cysinfo Cyber Security Community
 
PPTX
S2 e (selective symbolic execution) -shivkrishna a
Cysinfo Cyber Security Community
 
PPTX
Dynamic binary analysis using angr siddharth muralee
Cysinfo Cyber Security Community
 
PPTX
Bit flipping attack on aes cbc - ashutosh ahelleya
Cysinfo Cyber Security Community
 
PDF
Security Analytics using ELK stack
Cysinfo Cyber Security Community
 
PPT
Image (PNG) Forensic Analysis
Cysinfo Cyber Security Community
 
PPT
Malware Detection using Machine Learning
Cysinfo Cyber Security Community
 
PPTX
Deep Web - what to do and what not to do
Cysinfo Cyber Security Community
 
Understanding Malware Persistence Techniques by Monnappa K A
Cysinfo Cyber Security Community
 
Understanding & analyzing obfuscated malicious web scripts by Vikram Kharvi
Cysinfo Cyber Security Community
 
Getting started with cybersecurity through CTFs by Shruti Dixit & Geethna TK
Cysinfo Cyber Security Community
 
Emerging Trends in Cybersecurity by Amar Prusty
Cysinfo Cyber Security Community
 
A look into the sanitizer family (ASAN & UBSAN) by Akul Pillai
Cysinfo Cyber Security Community
 
Closer look at PHP Unserialization by Ashwin Shenoi
Cysinfo Cyber Security Community
 
Unicorn: The Ultimate CPU Emulator by Akshay Ajayan
Cysinfo Cyber Security Community
 
The Art of Executing JavaScript by Akhil Mahendra
Cysinfo Cyber Security Community
 
Reversing and Decrypting Malware Communications by Monnappa
Cysinfo Cyber Security Community
 
DeViL - Detect Virtual Machine in Linux by Sreelakshmi
Cysinfo Cyber Security Community
 
Analysis of android apk using adhrit by Abhishek J.M
Cysinfo Cyber Security Community
 
Understanding evasive hollow process injection techniques monnappa k a
Cysinfo Cyber Security Community
 
Security challenges in d2d communication by ajithkumar vyasarao
Cysinfo Cyber Security Community
 
S2 e (selective symbolic execution) -shivkrishna a
Cysinfo Cyber Security Community
 
Dynamic binary analysis using angr siddharth muralee
Cysinfo Cyber Security Community
 
Bit flipping attack on aes cbc - ashutosh ahelleya
Cysinfo Cyber Security Community
 
Security Analytics using ELK stack
Cysinfo Cyber Security Community
 
Image (PNG) Forensic Analysis
Cysinfo Cyber Security Community
 
Malware Detection using Machine Learning
Cysinfo Cyber Security Community
 
Deep Web - what to do and what not to do
Cysinfo Cyber Security Community
 

Recently uploaded (20)

PDF
Upgrade and Innovation Strategies for SAP ERP Customers
Virendra Rai, PMP
 
PDF
Softaken Excel to vCard Converter Software.pdf
markwillsonmw004
 
PDF
Design an Analysis of Algorithms I-SECS-1021-03
DilanEscobar1
 
PDF
Wondershare Filmora 15 Crack With Activation Key [2025
ghrom2211g
 
PPTX
Odoo POS Development Services by CandidRoot Solutions
CandidRoot Solutions Private Limited
 
PDF
Odoo Companies in India – Driving Business Transformation.pdf
azhuhardeen1968
 
PDF
PTS Company Brochure 2025 (1).pdf.......
pts464036
 
PPTX
history of c programming in notes for students .pptx
Vijayakumari829030
 
PPTX
VVF-Customer-Presentation2025-Ver1.9.pptx
blackmambaettijean
 
PDF
Why TechBuilder is the Future of Pickup and Delivery App Development (1).pdf
TechBuilder
 
PPTX
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
Conacent Consulting
 
PDF
Internet Downloader Manager (IDM) Crack 6.42 Build 41
ghrom2211g
 
PPTX
Introduction to Artificial Intelligence
lohedi9363
 
PDF
Which alternative to Crystal Reports is best for small or large businesses.pdf
Varsha Nayak
 
PPTX
ai tools demonstartion for schools and inter college
harshavardhanreddyka11
 
PDF
Nekopoi APK 2025 free lastest update
umarali35kp
 
PPTX
Transform Your Business with a Software ERP System
Canada Software Company
 
PPTX
Agentic AI : A Practical Guide. Undersating, Implementing and Scaling Autono...
IT IDOL Technologies
 
PDF
Claude Code: Everyone is a 10x Developer - A Comprehensive AI-Powered CLI Tool
William Chong
 
PPTX
Agentic AI Use Case- Contract Lifecycle Management (CLM).pptx
mhxyzzp
 
Upgrade and Innovation Strategies for SAP ERP Customers
Virendra Rai, PMP
 
Softaken Excel to vCard Converter Software.pdf
markwillsonmw004
 
Design an Analysis of Algorithms I-SECS-1021-03
DilanEscobar1
 
Wondershare Filmora 15 Crack With Activation Key [2025
ghrom2211g
 
Odoo POS Development Services by CandidRoot Solutions
CandidRoot Solutions Private Limited
 
Odoo Companies in India – Driving Business Transformation.pdf
azhuhardeen1968
 
PTS Company Brochure 2025 (1).pdf.......
pts464036
 
history of c programming in notes for students .pptx
Vijayakumari829030
 
VVF-Customer-Presentation2025-Ver1.9.pptx
blackmambaettijean
 
Why TechBuilder is the Future of Pickup and Delivery App Development (1).pdf
TechBuilder
 
Oracle E-Business Suite: A Comprehensive Guide for Modern Enterprises
Conacent Consulting
 
Internet Downloader Manager (IDM) Crack 6.42 Build 41
ghrom2211g
 
Introduction to Artificial Intelligence
lohedi9363
 
Which alternative to Crystal Reports is best for small or large businesses.pdf
Varsha Nayak
 
ai tools demonstartion for schools and inter college
harshavardhanreddyka11
 
Nekopoi APK 2025 free lastest update
umarali35kp
 
Transform Your Business with a Software ERP System
Canada Software Company
 
Agentic AI : A Practical Guide. Undersating, Implementing and Scaling Autono...
IT IDOL Technologies
 
Claude Code: Everyone is a 10x Developer - A Comprehensive AI-Powered CLI Tool
William Chong
 
Agentic AI Use Case- Contract Lifecycle Management (CLM).pptx
mhxyzzp
 

Dissecting Android APK

  • 1. Dissecting Android APK Reversing Android applications
  • 2. /> self.me - Final year undergraduate student at Amrita University, Amritapuri - Love Android ! - Currently researching on Android security - Play CTFs as a part of team bi0s
  • 4. Index - Why Android ? - Android security implementations and issues - Real world Android malwares - Reversing Android apps - Structure of an APK - Analyzing the contents
  • 5. Why Android ? The Tale of Triumph Open source - power to you! User-friendly Most used - more developers
  • 6. Mobile OS Global Market Share 2016
  • 7. Android security - Sandboxing - Permissions - ASLR since Android 4.0 ICS - ARM TrustZone Implementations
  • 10. Are we at risk ?
  • 11. Issues - Malwares - Ransomwares - Exploits
  • 12. Real world Android malwares
  • 13. AccuTrack : Turns an Android device into a GPS tracker AckPost : Steals contact information from the device and sends it to a remote server BackFlash / Crosate : Installs as a fake Flash plugin, registers as a Device administrator, and steals sensitive data BankBot : Particularly aims at stealing bank account information from dedicated apps DroidDeluxe : Exploits the device to gain root privilege and then modifies access permission of database files and collects account information
  • 14. APK Android package : APK Zip file with .apk extension Playstore, Amazon Appstore, F-Droid Java + res + XML + Libs Android PacKage
  • 16. Reversing Android apps Tools and Methodologies
  • 17. APKTOOL Reversing APKs - Compile/decompile apps - Smali code - To modify apps
  • 19. assets - all the unmodified app contents AndroidManifest.xml - Generic; The app-map classes.dex - Java files’ package. The Dalvik executable [ yeah! the source ] res - All the resources ( drawables, icons, values ) lib - External/custom native libraries Resources.asrc - Compiled resources / binaries META-INF - Certificates
  • 20. Dalvik / ART → JVM redefined → Dalvik until 4.4.4 Kitkat. ART from 5.0 Lollipop → Executes dex → Dalvik - JIT, ART - AOT
  • 21. DEX Dalvik Executable > Dalvik’s bytecode > java classes > Easy to debug
  • 22. Tools
  • 23. ADB Android Debug Bridge - Android tool - Drop shells, files - Access partitions - Install applications
  • 24. Dex2Jar The source - Small in size - Any platform - Extracts compiled classes out of the dex - Easy to use
  • 25. Demo
  • 26. Workaround ? → Check permissions → Trusted app sources → Use ‘ anti-malware ’ apps
  • 27. Glossary - aapt : Android Asset Packaging Tool. - dex : Dalvik executable. - dx : Tool within the Android SDK used to convert the jar files into dex files. - R.java : A class with static methods to reference all the resources.
  • 28. In-depth Introduction to Android Permission Model Android Internals by Karim Yaghmour Logcat Security Issue Dalvik and ART Dex2jar, ADB, APK Tool DexGuard obfuscator Dalvik opcodes OWASP Seraphimdroid References