6 posts in this category
A manual Smali patch was applied to an Android APK after static analysis revealed that the flag function was never called. Redirecting the function call and rebuilding the app exposed the hidden flag.
A static analysis of an Android APK uncovered misleading password logic designed to hide the real flag function. By modifying the Smali code to patch the function call, the correct method was executed and the flag recovered.
Static analysis of an Android app revealed a weak password protection mechanism based on simple arithmetic and string manipulation. Manually decoding the logic exposed the correct password and retrieved the flag.
Reverse engineering an Android app revealed a secret key stored in strings.xml. By tracing input validation and comparing the stored value, the hidden flag was successfully exposed.
Runtime analysis of an Android app revealed sensitive data exposed through Logcat logs. By triggering the native function and monitoring logs, the hidden flag was retrieved.
A walkthrough of reversing a React Native APK using JADX and bundle inspection to expose a hard-coded API token, demonstrating practical static analysis skills in mobile security.