Comment

Comment by ignoramous

The author is yet to complete the tutorial but its an interesting resource, nonetheless.

The tutorial does leave out https://frida.re which offers a runtime no-root reverse engineering mechanism, which I'm currently using it to MiTM apps with cert-pinned TLS.

There's also the excellent FlowDroid and Androguard, the latter of which I've used for static analysis [0].

I recall NateLawson founded a YC startup, SourceDNA [1], that offered intelligence on reverse engineered iOS and Android apps (based on static analysis). I wonder what tools they used.

[0] https://github.com/ashishb/android-security-awesome

[1] https://news.ycombinator.com/item?id=10049925

parent ignoramous 7 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton