💾Tampering and reverse engineering

Mobile App Tampering and Reverse Engineering

If there are no tools listed after the heading, the links are just used to gather knowledge and information about the topic.

Basic Tampering Techniques

Binary Patching

iOS

• Patch binary with Objection, to run Frida on a non-jailbroken device

• Modify binay with Ghidra and resign it

Android

• Patch binary with Objection, to run Frida on a non-rooted device

  • patch-apk for multi-package apps

• Check if there are ways to modify the binary and re-sign it, like in iOS

Code Injection

iOS

• Frida

• Cycript

• frida-cycript

Android

• Frida

• Xposed

• frida-cycript

Static and Dynamic Binary Analysis

• MobSF - Static .ipa and .apk analyser

Using Disassemblers and Decompilers

Obfuscation

Debugging and Tracing

Advances Techniques

Dynamic Binary Instrumentation

Android

• Valgrind

• Inspeckage

Emulation-based Dynamic Analysis

iOS emulators

• Corellium

Android emulators

• Corellium

• Android studio emulator

  • Root with rootAVD

It is advised to choose an android emulator with Play Store already installed.

Custom Tooling with Reverse Engineering Frameworks

iOS

• Radare2

Android

• Radare2

• Angr