Investigating Internals With Stoic
summary
A tool called Stoic injects and runs compiled code inside any app process without modifying the APK and no root required, demoing a radiography view dump and native-heap inspection. It finds a single 139 MB bitmap and can stream it to JPEG, and it hooks Java methods with instrumentation that adds callbacks at each invocation while slowing the app far less than a debugger — two orders of magnitude faster (single-digit microseconds vs double-digit milliseconds). It attaches via JVMTI, loads a server dexjar, and uses ADB socket forwarding.
AI-written summary · about
chapters (6)
- 0:00Stoic introduction
- 1:47Radiography plugin demo
- 3:39Native heap memory bitmaps
- 7:07Performance debugging plugins
- 10:51How Stoic works under the hood
- 14:30Q&A
related talks
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
53mAndroid: He protec, but he also attac
48mA Novel Runtime Technique For Identifying Malicious Applications
33mReverse - Engineering apps on the device - how far can we go?
29mEndoscope: Unpacking Android Apps with VM-Based Obfuscation
19mARTist A Novel Instrumentation Framework for Customizing and Analyzing Apps
41mDeep dive into Android Studio Profilers
42mAndroid Internals for Developers