Live data from Hacker News

Apk.sh is a Bash script that makes reverse engineering Android apps easier

github.com

61–70 of 90 posts

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#61
post #2

Scripts like this empowering the end-user is why I consider the Android ecosystem superior.

I've noticed that a lot of the people who do Android modding, custom ROMs, etc. don't otherwise actually have any formal training in software or computing; they're just pursuing a goal of "I want my phone to do X" and end up learning a lot in the process. Indeed, this may be their first and only exposure to Java.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#62

Earlier quoted context omitted.

As someone who switched to iPhone in almost the same way as parent comment, it really does do those things far better. I frequently had to hard-reboot my android, install different versions of apps, etc because of something going wrong. Photos not saving was the last straw for me. It wasn't even because I was a particularly power user - I customized everything on it, but even after resetting it and wanting a clean sl…

interesting, those things (especially photos not saving) never happened to me on Samsung or google phones

Or huawei or lenovo or xiaomi or... I doubt there is any brand where this affected a large fraction of users, but those are the brands (besides google and samsung) that I have experience with from myself or (grand)parents (who would call me when that happens).

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#63
post #40

Earlier quoted context omitted.

This is fascinating, I really want to understand. Was Android (even stock) insufficient for reading news sites and quick photos? Or is iOS much better for you at those tasks? If that's all you need, then I would consider both Android or iOS sufficient, but I don't quite get why you'd give up so many options and capabilities to switch, unless iOS is much better at reading news and taking photos. Maybe an analogy to he…

I have a similar background. Used Androids from 2010-2018 and switched to iOS. Some arguments were: Android's capabilities became less over time. I had cool apps until 4.4 Kitkat which automated toggling on/off WLAN/GPS/mobile network among others, but these APIs were restricted more and more over time so the benefits became less. Another fact was that I calculated that iPhones were cheaper than all Android I owned w…

> For example I never used the feature to use WiFi networks to get coarse location.

The iPhone doesn't have the ability to disable this at all. If you want to get your location, Apple will get it too.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#67

Earlier quoted context omitted.

Would this help to reverse engineer an encrypted API?

Yes. For example you could hook the function that encrypts the outgoing payload and print it out before it is encrypted. And then for decryption you could hook the function that decrypts the payload as it comes in print out the result. Going further, the API likely uses some secret key for encryption/decryption and you could hook that value out of the app as well.

Wow, that sounds really cool! Searching around i found this list: https://github.com/dweinstein/awesome-frida

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#68
post #54
post #44

Earlier quoted context omitted.

You recommend any projects that are similar to this and up to date?

LineageOS build guides are a great resource to get started: https://wiki.lineageos.org/build_guides

+ 1.

In case anyone wants to use Play store apps with push notifications(GCM) on LineageOS, I highly recommend MicroG+F-droid bundled version[1].

If not for privacy, De-googling results in excellent power backup.

[1]: https://lineage.microg.org/

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#69
post #39

Reminds me of the old days of running this tool - kitchen sink, https://forum.xda-developers.com/t/kitchen-android-kitchen-v... those days of cyanogenmod/rolling your own rom based off Gingerbread 2.3.7 and hacking... happy memories :)

I was into reverse engineering android apps in the same period, My toolchain at that time was -

Java Decompilation:

Method 1: Dare + JD Decompiler +Cavaj (or) DJ Decompiler

Method 2: dex2jar + JD Decompiler + Cavaj (or) DJ Decompiler

Method 3 : AndroChef Java Decompiler

Accessing Apk Resource Files:

Apk Tool.

Selecting Decompilation of System Files:

Smali, Backsmali

Later a tool called Procyon replaced many of the aforementioned tools.

P.S. Not including links for any of those tools as apart from being obviously outdated, Many of those tools started flagging for malware in later days; Perhaps they're just false positive considering their feature set but I don't want to risk it.

Re: Apk.sh is a Bash script that makes reverse engineering Android apps easier

#70
post #54

Earlier quoted context omitted.

LineageOS build guides are a great resource to get started: https://wiki.lineageos.org/build_guides

+ 1. In case anyone wants to use Play store apps with push notifications(GCM) on LineageOS, I highly recommend MicroG+F-droid bundled version[1]. If not for privacy, De-googling results in excellent power backup. [1]: https://lineage.microg.org/

I don't really know much about this, but since microG reimplements the GooglePlay API.. doesn't that mean it must phone back to Google servers?

If you want privacy, I assume you shouldn't use any of these?

Post reply on HN