4 ms·

Is there a good guide out there on reverse engineering mobile apps for iOS & Android?

• seanp2k2 9y ago
  Use http://www.telerik.com/fiddler http://www.telerik.com/fiddler or https://www.charlesproxy.com https://www.charlesproxy.com or https://mitmproxy.org https://mitmproxy.org If they pin certs it can be harder but not impossible.
  • _e 9y ago
    Xposed Framework module to disable SSL cert pinning https://github.com/Fuzion24/JustTrustMe https://github.com/Fuzion24/JustTrustMe
• amenghra 9y ago
  https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2015/january/bypassing-openssl-certificate-pinning-in-ios-apps/ https://www.nccgroup.trust/us/about-us/newsroom-and-events/b... is a good start. You can do some fun stuff once you can see/proxy/modify requests. If you want to get started, start by poking at something simple (e.g. your own app). Then google as you run into specific issues.
• canistr 9y ago
  I liked this guide on reversing Android. https://www.evilsocket.net/2017/04/27/Android-Applications-Reversing-101/ https://www.evilsocket.net/2017/04/27/Android-Applications-R... CharlesProxy is a must-have whether you're a dev or reverse-engineering. JADX is the best for reversing Android because it produces readable Android code which is fantastic for current Android developers who expect things to be organized like Android Studio.
• conradev 9y ago
  I gave an intro of sorts here for iOS: https://news.realm.io/news/conrad-kramer-reverse-engineering-ios-apps-lyft/ https://news.realm.io/news/conrad-kramer-reverse-engineering...