Trueseeing: Effective Dataflow Analysis over Dalvik Opcodes
summary
Trueseeing performs direct Dalvik opcode analysis without a decompiler, ingesting APKs with apktool, storing code in an SQLite-backed codebase, and using strategies like backtracking, call‑stack, static and instance‑field tracing to follow constants and taints. It resists ProGuard-style obfuscation, finds 21 issues on an obfuscated BankBot sample, analyzes that APK in ~49 seconds, covers most OWASP Mobile Top 10 (2015), emits HTML/CI reports scored with CVSS 3.0, and can do auto-binary patching; code is on GitHub (GPL‑3).
AI-written summary · about
chapters (39)
- 0:00Introduction
- 1:27Static vs dynamic analysis
- 2:30Dataflow analysis challenges
- 4:00Decompiler limitations
- 5:51Trueseeing design
- 6:58Building codebase from Dalvik
- 8:24Efficient analysis mapping
- 9:26Tracking dataflow
- 10:15Forward/backward tracking
- 11:21Call stack tracing
- 12:30Static field tracing
- 13:35Instance field tracing
- 14:58Automated patching
- 16:05Vulnerability remediation
- 17:08Reporting vulnerabilities
- 17:55CVSS scoring
- 19:52OWASP Mobile Top 10
- 20:34BankApp case study
- 22:49Live demo on BankApp
- 24:42Vulnerability categories
- 26:11M1: Improper platform usage
- 27:17M3: Insecure communication
- 28:44M5: Insecure cryptography
- 29:31Real-world app analysis
- 30:12Future plans
- 30:54Storage zoning and argument filtering for precision
- 31:59Context-aware assessment
- 32:44Additional vulnerability types
- 33:30Crypto key weakness
- 34:15Data exposure analysis
- 34:57Exploit automation plans
- 35:45ARM code analysis
- 36:47MSIL for Unity apps
- 37:30iOS Swift/bitcode
- 38:20Symbolic execution
- 38:45Dynamic analysis integration
- 39:26Performance benchmarks
- 40:07Open-source availability
- 40:31Development roadmap
related talks
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
45mReverse engineering mobile apps: how, why, and what now?
29mBytecode analysis for everyone!
30mA day in the life of a mobile reverse engineer
29mA day in the life of a mobile reverse engineer
44mAuditing Your APKs Like a Black Hat Hacker
47mAttacking Android Applications
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security