Pack your Android: Everything you need to know about Android Boxing
summary
Describes concrete methods to extract malicious code from hardened Android apps: three hardening types (obfuscators, packers, protectors), with worked techniques — a Python decoder that removes switch case injection and decrypts strings for DexProtector/DexGuard-style obfuscation, patching and hooking native libs (patching secondhand.so, hook libc and dump DEX from memory) to unpack packers, and an adb backup to recover classes.dex when packers write decrypted DEX to disk. Claims 456 extracted genomes, 46 hardeners catalogued, and successful extraction of ransomware and TZ families.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:30Why does it matter
- 9:13hardening technologies
- 13:12dex protector
- 18:13Packer
- 26:31Protector
- 28:47Poppyseed
- 30:47IOT
related talks
33mWe Can Still Crack You! General Unpacking Method For Android Packer (no Root)
47mAttacking Android Applications
47mSecuring Android Applications
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
33mShielding Your Android App from Attackers
45mGoing Beyond Obfuscation: Advanced Techniques for Protecting Android Apps
38mAdvanced Techniques for Protecting Android Apps
37mThe Art of Hiding Sensitive Info in Plain Sight