androidtrainings's Introduction

Mobile Security Trainings

Mobile security trainings based on android

Material:

Hacking Soft Tokens. Advanced Reverse Engineering on Android by Bernhard Mueller.
Android Malware Reverse Engineering. Hack.Lu, October 2016 by Axelle Apvrille.
Red Naga Training Docs. Training materials crafted and publicly provided by Red Naga members at DEFCON23, August 2015.
OWASP crackmes: UnCrackable Mobile Apps. Android CTF-like crackmes.

androidtrainings's People

Contributors

Stargazers

Watchers

androidtrainings's Issues

UnCrackable-Level3.apk run_usb_spawn.py error

Issue

Got the following errors when using testing "run_usb_spawn.py" to UnCrackable-Level3.apk from the URL below
https://github.com/enovella/androidtrainings/blob/master/owasp-crackmes/level3/UnCrackable-Level3.apk

args[0] and args[1] are not shown in the output

ReferenceError: identifier 'haystack' undefined
    at [anon] (../../../frida-gum/bindings/gumjs/duktape.c:83853)
    at /script1.js:40
[!] Received: [pthread_create() overloaded]
[!] Received: [loading real pthread_create()]
[!] Received: [libfoo.so          @ 0x7adac70000]
[!] Received: [ptr_strncmp_xor64  @ 0x7adac777ec]
[!] Received: [ret: 0]
[!] Received: [pthread_create() overloaded]
[!] Received: [loading real pthread_create()]
[!] Received: [libfoo.so          @ 0x7adac70000]
[!] Received: [ptr_strncmp_xor64  @ 0x7adac777ec]
[!] Received: [ret: 0]
[!] Received: [pthread_create() overloaded]
[!] Received: [loading real pthread_create()]
[!] Received: [libfoo.so          @ 0x7adac70000]
[!] Received: [ptr_strncmp_xor64  @ 0x7adac777ec]
[!] Received: [ret: 0]
ReferenceError: identifier 'haystack' undefined
    at [anon] (../../../frida-gum/bindings/gumjs/duktape.c:83853)
    at /script1.js:40
ReferenceError: identifier 'haystack' undefined
    at [anon] (../../../frida-gum/bindings/gumjs/duktape.c:83853)
    at /script1.js:40
ReferenceError: identifier 'haystack' undefined
    at [anon] (../../../frida-gum/bindings/gumjs/duktape.c:83853)
    at /script1.js:40
ReferenceError: identifier 'haystack' undefined
    at [anon] (../../../frida-gum/bindings/gumjs/duktape.c:83853)
    at /script1.js:40
[!] Received: [MainActivity.onStart() HIT!!!]
[!] Received: [java.lang.System.exit(I)V  // We avoid exiting the application  :)]
[!] Received: [pthread_create() overloaded]
[!] Received: [loading real pthread_create()]
[!] Received: [libfoo.so          @ 0x7adac70000]
[!] Received: [ptr_strncmp_xor64  @ 0x7adac777ec]
[!] Received: [ret: 0]
ReferenceError: identifier 'haystack' undefined
    at [anon] (../../../frida-gum/bindings/gumjs/duktape.c:83853)
    at /script1.js:40

https://github.com/enovella/androidtrainings/blob/master/owasp-crackmes/level3/UnCrackable-Level3.apk

testingDevice: Nexus5X Android 7.1.1
fridaVersion: 12.11.4

The script work in your blogHere https://enovella.github.io/android/reverse/2017/05/20/android-owasp-crackmes-level-3.html

Could you please have a look?

Thank you!

The solution works as-is, but the commented out individual rootchecks don't work when I uncomment them. I get a "TransportError: unable to communicate with loader" error. Am I missing anything out? I'm running the exploit with "frida -U -f sg.vantagepoint.uncrackable1 -l hooks.js -no-pause". I'm also encapsulating hooks.js with setImmediate(function() {}) to prevent timeout.

Recommend Projects