SlideShare une entreprise Scribd logo
1  sur  14
Télécharger pour lire hors ligne
Donnerstag, 4. April 13
Is the process of discovering the technological
                          Reverse           principles of a device, object, or system through
                          Engineering       analysis of its structure, function, and operation
                                                                                             1




                                        1Eilam, Eldad & Chikofsky, Elliot J. (2007).
                                        Reversing: secrets of reverse engineering.



Donnerstag, 4. April 13
Valuable data
                          Purpose
                                    Interfacing

                                    Security analysis




Donnerstag, 4. April 13
Android Compiling   Coding in Java
            process
                                Compiling to Dalvik

                                Packaging

                                Distribution




Donnerstag, 4. April 13
(de)distribution   Pulling from device

                               Directly download via googleplay-pythonapi

                               Download from web




Donnerstag, 4. April 13
(de)distribution




Donnerstag, 4. April 13
(de)packaging   From dex to .smali or .java
             (de)compiling
                             dex2jar

                             apktool




Donnerstag, 4. April 13
Smali




Donnerstag, 4. April 13
APK Tool     https://code.google.com/p/android-apktool/
                                       downloads/list

                          Jar Signer   http://docs.oracle.com/javase/1.3/docs/
                                       tooldocs/win32/jarsigner.html

                          Keytool      http://docs.oracle.com/javase/6/docs/
                                       technotes/tools/windows/keytool.html




Donnerstag, 4. April 13
Crackme   http://crackmes.de/users/deurus/
                                    android_crackme03/

                          dex2jar
                                    http://code.google.com/p/dex2jar/

                          JD-GUI    http://java.decompiler.free.fr/




Donnerstag, 4. April 13
Smali   http://pallergabor.uw.hu/androidblog/
                                  dalvik_opcodes.html




Donnerstag, 4. April 13
Security Tokens

                          Private addresses

                          Unauthorized access

                          Cheating




Donnerstag, 4. April 13
Proguard   Obfuscating and optimizing tool

                                     http://developer.android.com/tools/help/
                                     proguard.html




Donnerstag, 4. April 13
Thank you!




                          + http://goo.gl/t4AVh

                          @eenriquelopez

                           http://www.neo-tech.es


Donnerstag, 4. April 13

Contenu connexe

Similaire à Debugging Android - GDG Munich

Engineering culture
Engineering cultureEngineering culture
Engineering culture
Pamela Fox
 
Android Developer Tips & Tricks
Android Developer Tips & TricksAndroid Developer Tips & Tricks
Android Developer Tips & Tricks
Evgeny Shishkin
 
Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...
Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...
Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...
Stefaan Ternier
 
Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013
Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013
Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013
cordoval
 
Using+javascript+to+build+native+i os+applications
Using+javascript+to+build+native+i os+applicationsUsing+javascript+to+build+native+i os+applications
Using+javascript+to+build+native+i os+applications
Muhammad Ikram Ul Haq
 

Similaire à Debugging Android - GDG Munich (15)

Writing testable code
Writing testable codeWriting testable code
Writing testable code
 
Hybrid Mobile Web Apps with Sencha Touch 2
Hybrid Mobile Web Apps with Sencha Touch 2Hybrid Mobile Web Apps with Sencha Touch 2
Hybrid Mobile Web Apps with Sencha Touch 2
 
CS3391 -OOP -UNIT – IV NOTES FINAL.pdf
CS3391 -OOP -UNIT – IV NOTES FINAL.pdfCS3391 -OOP -UNIT – IV NOTES FINAL.pdf
CS3391 -OOP -UNIT – IV NOTES FINAL.pdf
 
Writing jQuery that doesn't suck - London jQuery
Writing jQuery that doesn't suck - London jQueryWriting jQuery that doesn't suck - London jQuery
Writing jQuery that doesn't suck - London jQuery
 
Intravert atx meetup_condensed
Intravert atx meetup_condensedIntravert atx meetup_condensed
Intravert atx meetup_condensed
 
Engineering culture
Engineering cultureEngineering culture
Engineering culture
 
Android Developer Tips & Tricks
Android Developer Tips & TricksAndroid Developer Tips & Tricks
Android Developer Tips & Tricks
 
Native Javascript apps with PhoneGap
Native Javascript apps with PhoneGapNative Javascript apps with PhoneGap
Native Javascript apps with PhoneGap
 
Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...
Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...
Serious games at the UNHCR with ARLearn, a toolkit for mobile and virtual rea...
 
Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013
Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013
Specking Interactors with PHPSpec and YOLO (DDD) at PHPConference Argentina 2013
 
Web Application Security
Web Application SecurityWeb Application Security
Web Application Security
 
"The Opera of PhAnToMe": Phage Annotation Tools at the 20th Biennial Evergree...
"The Opera of PhAnToMe": Phage Annotation Tools at the 20th Biennial Evergree..."The Opera of PhAnToMe": Phage Annotation Tools at the 20th Biennial Evergree...
"The Opera of PhAnToMe": Phage Annotation Tools at the 20th Biennial Evergree...
 
Artificial intelligance
Artificial intelligance Artificial intelligance
Artificial intelligance
 
Using+javascript+to+build+native+i os+applications
Using+javascript+to+build+native+i os+applicationsUsing+javascript+to+build+native+i os+applications
Using+javascript+to+build+native+i os+applications
 
Ab(Using) the MetaCPAN API for Fun and Profit v2013
Ab(Using) the MetaCPAN API for Fun and Profit v2013Ab(Using) the MetaCPAN API for Fun and Profit v2013
Ab(Using) the MetaCPAN API for Fun and Profit v2013
 

Plus de Enrique López Mañas

Plus de Enrique López Mañas (12)

Droidcon IT 2015
Droidcon IT 2015Droidcon IT 2015
Droidcon IT 2015
 
Android Building, Testing and reversing
Android Building, Testing and reversingAndroid Building, Testing and reversing
Android Building, Testing and reversing
 
AnDevCon: Android Reverse Engineering
AnDevCon: Android Reverse EngineeringAnDevCon: Android Reverse Engineering
AnDevCon: Android Reverse Engineering
 
Android studio
Android studioAndroid studio
Android studio
 
Introducción a la Programación
Introducción a la ProgramaciónIntroducción a la Programación
Introducción a la Programación
 
Android: Dialogs
Android: DialogsAndroid: Dialogs
Android: Dialogs
 
Android: Almacenamiento de Datos
Android: Almacenamiento de DatosAndroid: Almacenamiento de Datos
Android: Almacenamiento de Datos
 
Android: Interfaz de Usuario
Android: Interfaz de UsuarioAndroid: Interfaz de Usuario
Android: Interfaz de Usuario
 
Android: Componentes (II)
Android: Componentes (II)Android: Componentes (II)
Android: Componentes (II)
 
Android: Componentes
Android: ComponentesAndroid: Componentes
Android: Componentes
 
Android: introducción
Android: introducciónAndroid: introducción
Android: introducción
 
Presentation android JUnit
Presentation android JUnitPresentation android JUnit
Presentation android JUnit
 

Dernier

Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
Joaquim Jorge
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 

Dernier (20)

Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdf
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdf
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 

Debugging Android - GDG Munich

  • 2. Is the process of discovering the technological Reverse principles of a device, object, or system through Engineering analysis of its structure, function, and operation 1 1Eilam, Eldad & Chikofsky, Elliot J. (2007). Reversing: secrets of reverse engineering. Donnerstag, 4. April 13
  • 3. Valuable data Purpose Interfacing Security analysis Donnerstag, 4. April 13
  • 4. Android Compiling Coding in Java process Compiling to Dalvik Packaging Distribution Donnerstag, 4. April 13
  • 5. (de)distribution Pulling from device Directly download via googleplay-pythonapi Download from web Donnerstag, 4. April 13
  • 7. (de)packaging From dex to .smali or .java (de)compiling dex2jar apktool Donnerstag, 4. April 13
  • 9. APK Tool https://code.google.com/p/android-apktool/ downloads/list Jar Signer http://docs.oracle.com/javase/1.3/docs/ tooldocs/win32/jarsigner.html Keytool http://docs.oracle.com/javase/6/docs/ technotes/tools/windows/keytool.html Donnerstag, 4. April 13
  • 10. Crackme http://crackmes.de/users/deurus/ android_crackme03/ dex2jar http://code.google.com/p/dex2jar/ JD-GUI http://java.decompiler.free.fr/ Donnerstag, 4. April 13
  • 11. Smali http://pallergabor.uw.hu/androidblog/ dalvik_opcodes.html Donnerstag, 4. April 13
  • 12. Security Tokens Private addresses Unauthorized access Cheating Donnerstag, 4. April 13
  • 13. Proguard Obfuscating and optimizing tool http://developer.android.com/tools/help/ proguard.html Donnerstag, 4. April 13
  • 14. Thank you! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Donnerstag, 4. April 13