Voxxed days Vilnius

In this talk we will present a systematic way of Reverse Engineering and repackaging any Android 
app, using open source tools. We will present static and dynamic analysis tools, both in the code and the network level, will present an EURRRR  (Extract, Unbuild, Repackage, Rebuild, Research) method for penetration testing Android Application, and will discuss the means of protections that might stand on our way - and might help us to better focus on where to put our efforts. We will present a thorough discussion of Android build intermediates and different byte code representation (or architecture specific native code), will explain when and how to approach a specific source or  byte code representation, and in particular explain when it is better to just concentrate on the bytecode, and not go all the way to the Java source files.

Since researching requires somewhat different skills than those of building, the talk is intended for researchers at heart, and does not require any prior Android development experience, but having such experience is recommended, and familiarity with basic Android concepts (Permission mechanisms, etc.) is assumed.