All Projects → pillfill → Hiding Passwords Android

pillfill / Hiding Passwords Android

A project to compare various secret/sensitive key hiding techniques in android.

Labels

Projects that are alternatives of or similar to Hiding Passwords Android

Html2apk
build Apk with html
Stars: ✭ 19 (-86.33%)
Mutual labels:  smali
Wechat
modified wechat
Stars: ✭ 66 (-52.52%)
Mutual labels:  smali
Obfusesmalitext
smali文件,jar包字符串混淆,支持gradle插件
Stars: ✭ 105 (-24.46%)
Mutual labels:  smali
Wechatforwarder
WechatForwarder module for xposed ,generated by reversing engineering from WechatForwarder by fkzhang
Stars: ✭ 31 (-77.7%)
Mutual labels:  smali
Autoreinforce
自动加固Android App
Stars: ✭ 55 (-60.43%)
Mutual labels:  smali
Gcam
Stars: ✭ 68 (-51.08%)
Mutual labels:  smali
Dtfmods Core
Core content for Android device testing
Stars: ✭ 5 (-96.4%)
Mutual labels:  smali
Treble experimentations
Notes about tinkering with Android Project Treble
Stars: ✭ 2,000 (+1338.85%)
Mutual labels:  smali
Simplesmali
通过精简Smali语法细节来增强反编译代码阅读性,自定义了一种简单语法
Stars: ✭ 61 (-56.12%)
Mutual labels:  smali
Pixellaunchermodv5
Stars: ✭ 95 (-31.65%)
Mutual labels:  smali
Deapk
DeAPK is an open-source, online APK decompiler which lets you upload an APK and then decompile it to Smali or Java sources. It is built using Laravel, Vue.js, Bootstrap, FontAwesome, Pusher, Redis, MySQL, apktool, jadx and hosted atop Oracle cloud platform.
Stars: ✭ 33 (-76.26%)
Mutual labels:  smali
Droidjack
Este troyano para Android es uno de los más completos. Con él vamos a poder tener acceso a remoto a todo el dispositivo infectado, desde la agenda, las llamadas y los SMS hasta el micrófono y las cámaras del smartphone. Todo.
Stars: ✭ 44 (-68.35%)
Mutual labels:  smali
Tinysmaliemulator
A very minimalist smali emulator that could be used to "decrypt" obfuscated strings
Stars: ✭ 68 (-51.08%)
Mutual labels:  smali
Tps
腾讯 TOS 适配系统
Stars: ✭ 27 (-80.58%)
Mutual labels:  smali
Apk Changer
Command line program for modifying apk files
Stars: ✭ 122 (-12.23%)
Mutual labels:  smali
Simple Deodexer
A simple Android application deodexer for Linux & macOS
Stars: ✭ 16 (-88.49%)
Mutual labels:  smali
Jflte Gpe
Google Edition by Danvdh, Kryten2k35, Googy_Anas & Ktoonsez
Stars: ✭ 67 (-51.8%)
Mutual labels:  smali
Haxrat
A Android RAT with lots of features , check README for more information.
Stars: ✭ 135 (-2.88%)
Mutual labels:  smali
Backdoor Apk
backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
Stars: ✭ 1,766 (+1170.5%)
Mutual labels:  smali
Jbart
Crossplatform (java based) Android ROMs Tools.
Stars: ✭ 83 (-40.29%)
Mutual labels:  smali

Hiding Passwords

See the blog post explaining this project here: http://rammic.github.io/2015/07/28/hiding-secrets-in-android-apps/

This is a simple demonstration app to illustrate some of the methods used hide keys, passwords, or other sensitive information within an APK. This project doesn't aim to show how this SHOULD be done- rather, we want to how show the various techniques work as well as some of the more significant limitations.

There is simply no foolproof way to prohibit someone with an app's binaries from accessing sensitive information embedded within it. This is especially true with Android apps. Hiding and obfuscation techniques can only make the task reverse engineering task harder. The only surefire way to keep information safe from compromised is to not expose it- keep passwords, keys, etc. on a server you own and never put it into the app in the first place.

Goal

This project does not aim to address content DRM, encryption, encoding, etc. directly- all of which are relevant once the relevant key material has been successfully embedded and retrieved. Instead, this project will focus on key management techniques specifically.

Build

It's easiest to just build a single platform variant if you want analyze the generated binaries:

gradle clean assembleX86Debug

Note that this project depends on the current Android NDK. Android Studio and Gradle builds will notify you of that the current NDK is deprecated:

Android plugin version 1.2.3 is not compatible with the NDK support. Please use the experimental plugin. or Current NDK support is deprecated. Alternative will be provided in the future.

Builds should still work though despite the warning. See Issue #2 for more information.

Contributing

If you have a novel key management/protection scheme that you'd like to see included, please feel free to open a pull request to include it.

Use

This project is intended to be instructive and, as such, many of the examples will be implemented in an unnecessarily vulnerable or trivially broken manner. You should not depend on code or examples from this project alone if you decide to hide sensitive information within your app.

License

The MIT License (MIT)

Copyright (c) 2015- Apothesource, Inc.

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].