Skip to main content

All Questions

Tagged with
0 votes
0 answers
45 views

Applying right offsets of Android Native Code in Ghidra

I'm reverse engineering x86_64 native code library that's loaded by an application. I use Ghidra to get the following decompiled code and I'm trying to make sense of the function calls and different ...
Danking's user avatar
1 vote
0 answers
405 views

Read value from frida hooked native method Jlong parameter

I am new to using frida for hooking native android code i.e lib.so, so I have load the lib into ghidra and can find the native function. the native function is getting 5 params including jnienv and ...
hanan's user avatar
  • 309
0 votes
1 answer
429 views

How learn which functions are called in .so library at Android?

I want to learn how listen certain .so files. I mean what is the way to know which fuctions are called which body of code executed in shared library at Android? I just wanted mofify stock camera on my ...
Savox Saastuxl's user avatar
1 vote
0 answers
54 views

JEB pro is not showing xrefs for native code (arm)

i have this problem when analyzing arm shared object. when working with IDA pro, it finds all xrefs but in jeb, most of xrefs are missing. when JEB finfishes, the final analysis lacks most of xrefs. I ...
shetal's user avatar
  • 51
2 votes
0 answers
559 views

Cannot load libvulkan.so on Linux chroot running on Android while normal Android apps can load it

Environment First I will give a quick summary of my environment Device: Samsung Galaxy M20 (m20lte) SoC: Exynos 7904 (with Mali-G71 GPU) OS: Android 10 (Stock ROM with root using Magisk) Kernel: 4.4....
raspiduino's user avatar
2 votes
0 answers
295 views

ghidra assigns local variable to register

im reversing a android native library and im trying to understand how a token is generated the toke n is passed to a callback java method and i traced where the method is getting called from this is ...
ahmed mani's user avatar
1 vote
0 answers
815 views

Some obstacles in reversing a JNI Native library

I deleted my last question (it was not still answered and none's effort was wasted) as I got back and thought to re-read JNI documentation, to find I misinterpreted some bits. Things are now clearer ...
CortexAuth's user avatar
4 votes
1 answer
125 views

What does a C++ identifier ending in $_## mean?

In trying to understand a .so from an Android game made with Cocos2d-x, I've come across identifiers like the following (after demangling): SceneActionMap::updateTalkMode(float)::$_37 SceneActionMap::...
Squ's user avatar
  • 73
2 votes
1 answer
5k views

Inject code into JNI function (Android shared library)

An android app loads a native library (.so) using System.loadLibrary. It then calls a specific function, which takes 3 input variables, and returns a string containing a MD5 hash. You can see the ...
user avatar
1 vote
1 answer
868 views

JNI_onLoad not presented in .so (Android)

I'm trying to analyze a .so file that is ran on android. Loading the file into IDA I'm unable to spot the JNI_onLoad. So I dumped the .so to memory and I'm still unable to spot the JNI_onLoad. ...
NotGI's user avatar
  • 231
0 votes
1 answer
2k views

Need help reversing an Android Game

I am trying to find the portion of code in an android game that is responsible for the main logic of the game. (e.g Calculating damage when shooting the zombie) The game is obviously using native code ...
Lew Wei Hao's user avatar
0 votes
2 answers
781 views

How can I debug android native library with ida demo?

I am trying to debug android native library using ida demo version everything otherthing is working except some one I can't find android_server file for keeping on android device and can't see the ...
Yashdeep Hinge's user avatar
1 vote
3 answers
8k views

How to dump Android shared library from memory?

I have encrypted Android so library that decrypts itself on load. I want to get its unencrypted code. For me it looks good idea to dump that library from memory when application started. I used /proc/...
Vitalii's user avatar
  • 395
7 votes
2 answers
1k views

Attach Shared Object to android process with IDA

I am: working with an Android game, using an Android Emulator, and trying to attach an android .so library to a process. I have the whole IDA server set up, I can attach to processes when a classes....
Frenchy Fry's user avatar
1 vote
1 answer
5k views

Breakpoint to debug Android Native Shared Library

I'm trying to solve FLARE-on 2015 challenge #06 (http://www.flare-on.com/files/2015_FLAREOn_Challenges.zip) using a dynamic analysis approach. It's an Android APK that loads a shared library (...
Sebastien Damaye's user avatar