Back to all posts

#android

#android

3 posts with this tag

Mobile Security

Breaking Weak Code Protection: Decoding Obfuscated Password Logic in Android Application

Static analysis of an Android app revealed a weak password protection mechanism based on simple arithmetic and string manipulation. Manually decoding the logic exposed the correct password and retrieved the flag.

#reverse-engineering #android +3

July 30, 2024
Mobile Security

Extracting Hard-Coded Secrets from strings.xml: Uncovering Hidden Keys via Android Static Analysis

Reverse engineering an Android app revealed a secret key stored in strings.xml. By tracing input validation and comparing the stored value, the hidden flag was successfully exposed.

#reverse-engineering #android +3

July 29, 2024
Mobile Security

Exploiting Insecure Logging: Retrieving Sensitive Data from Android Logcat During Runtime Analysis

Runtime analysis of an Android app revealed sensitive data exposed through Logcat logs. By triggering the native function and monitoring logs, the hidden flag was retrieved.

#reverse-engineering #android +3

July 28, 2024