Live data from Hacker News

Apk.sh is a Bash script that makes reverse engineering Android apps easier

github.com

31–40 of 90 posts

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#31
post #20

I love seeing more excellent tooling made with bash/shell scripts. For situations like this one, where all the underlying heavy lifting is done with other CLI utilities, shellscript is the perfect fit.

The Android system shell is the MirBSD Korn shell.

Why not use the preferred tool?

Otherwise, why not write it in dash for strict POSIX conformance?

I do admit that there are some profound bash applications that are important to me, principally rear.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#32
post #29

While I'm here: What is going on with "Android Emulation on Linux???" I feel like I have to be missing something obvious, I can't see how it can be so darn hard to just run android apps on (desktop) Linux given..you know, that it is Linux.

The API of 'Linux' is its system calls, and I guess very few Android apps are coded against that; most use the Android SDK. So presumably Android's services and API surface need to be ported to desktop Linux, which is probably very involved.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#33
post #18
post #5

It seems to be made for injecting Frida into APKs. I'm having trouble understanding what Frida is. Can I do something cool with it?

Sadly the name "Frida" suffers from poor googleability. But here you go: https://frida.re/ Basically it's _the_ reverse engineering toolkit for security researchers. Has excellent support across Android, iOS, macOS, Windows, etc.

I did not know that Frida is used for anything but Mobile apps, thanks :D

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#34
post #29

While I'm here: What is going on with "Android Emulation on Linux???" I feel like I have to be missing something obvious, I can't see how it can be so darn hard to just run android apps on (desktop) Linux given..you know, that it is Linux.

Is it hard? Check out Waydroid if you haven't already.

https://waydro.id/

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#35
post #29

While I'm here: What is going on with "Android Emulation on Linux???" I feel like I have to be missing something obvious, I can't see how it can be so darn hard to just run android apps on (desktop) Linux given..you know, that it is Linux.

Why do you think it's hard? Waydroid is very good.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#36

Earlier quoted context omitted.

This past June, I switched to iPhone.

thanks. I don't doubt you, but it's shocking to hear that a modern LG flagship struggles to take photos and read news (I'm assuming a web browser?). That would indeed be maddening. I've been using either Nexus, Pixel, or OnePlus for many years now so I'm not familiar with The LGs, Samsungs, Motos, etc, but I was under the impression that they were all pretty stable (though underpowered when you buy a cheap model).

I use android but most of my experiences with LG phones was very buggy and just messy (the G2 was pretty good though). I only ever buy samsung or google phones now, but it makes sense that someone wouldn't want to touch android if they had a subpar experience with another manufacturer.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#37

Earlier quoted context omitted.

This past June, I switched to iPhone.

thanks. I don't doubt you, but it's shocking to hear that a modern LG flagship struggles to take photos and read news (I'm assuming a web browser?). That would indeed be maddening. I've been using either Nexus, Pixel, or OnePlus for many years now so I'm not familiar with The LGs, Samsungs, Motos, etc, but I was under the impression that they were all pretty stable (though underpowered when you buy a cheap model).

LG left the mobile market last year. I think it's fair to say that they were struggling to keep up with everyone else.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#38
post #4

If you haven't tried Jadx [1], give it a shot. It's by far the easiest way to reverse Android APKs. It doesn't do patching or reassembly, but I used it for reversing the Delong'hi APK for longshot [2][3] and the quality of output was fantastic. Note that scripts like this are extremely useful, but in the long term they're cobbling together a lot of tools and will become brittle or difficult to use across versions. I…

These are great. I used jadx to pull apart a conference attendee app I was supposed to install to see what it hoovered up. There is a level of reverse engineering that people can just get comfortable with doing without ahcieving the virtuosity of the stuff people publish papers and get talks about. Simple things like, what SDKs does this thing use (adware), what external APIs does it call (trackers), what interfaces…

I have used ClassyShark[1] to get some of that (from F-droid) with pretty good results.

1: https://fossdroid.com/a/classyshark3xodus.html

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#40
post #6

Earlier quoted context omitted.

i used to be an android poweruser in high school and college, I rooted my phones, played around with lots of custom roms, had a terminal emulator and full power of arm debian installed in a chroot environment, tried different keyboard apps, launchers, and all other customization possibilities... then I started working full-time and had way less free time and realized 99% of the time I now use my phone to read news si…

This is fascinating, I really want to understand. Was Android (even stock) insufficient for reading news sites and quick photos? Or is iOS much better for you at those tasks? If that's all you need, then I would consider both Android or iOS sufficient, but I don't quite get why you'd give up so many options and capabilities to switch, unless iOS is much better at reading news and taking photos. Maybe an analogy to he…

I have a similar background. Used Androids from 2010-2018 and switched to iOS.

Some arguments were: Android's capabilities became less over time. I had cool apps until 4.4 Kitkat which automated toggling on/off WLAN/GPS/mobile network among others, but these APIs were restricted more and more over time so the benefits became less.

Another fact was that I calculated that iPhones were cheaper than all Android I owned when taking resale value into the calculation. That Apple gives OS updates for 5+ years helped a lot here, I had experienced But one of the biggest reasons was that I never trusted Google much. For example I never used the feature to use WiFi networks to get coarse location. Which meant worse UX (had to click NO on a dialogue each time I activated GPS) but also a "feature" the iPhone had (better location).

This is obviously a very personal point of view and it might be very different today, as I used Android in its earlier years.

Post reply on HN