Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[feature]APK Dalvik Signature Lookup #2201

Open
imanbingi opened this issue Jun 13, 2024 · 2 comments
Open

[feature]APK Dalvik Signature Lookup #2201

imanbingi opened this issue Jun 13, 2024 · 2 comments

Comments

@imanbingi
Copy link

imanbingi commented Jun 13, 2024

Describe your idea

Hi there, Great job done.
I want to know if it is possible to add something similar to IDA Pro FLIRT as follows:
1.Create signatures of standard/3rd party library dalvik functions.
2.Apply a lookup for these functions instead of decompilation.
I think this may help to isolate actual user code from library codes and avoid the
repetition of identifying/decompiling library codes for every single APK.
Thankx.

@imanbingi imanbingi changed the title APK Dalvik Signature Lookup [feature]APK Dalvik Signature Lookup Jun 13, 2024
@jpstotz
Copy link
Collaborator

jpstotz commented Jul 19, 2024

Developing a signature format that is compiler agnostic (and may be even obfuscator agnostic) is quite a bit of work and then processing thousand of libraries to generate the signatures, providing them for download, refreshing them when new versions come out....

Jadx-Gui has a plugin system. Feel free to write and publish such a library identification plugin.

@imanbingi
Copy link
Author

Great to hear that. I will take this on in my spare time.
However, I may need the following about jadx flow chain to get started:

  1. API to hook after jadx deobfuscation.
  2. Overview of jadx code generation architecture.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants