Reversing dpt-shell - A Class-Extraction Packer from the Inside Out
Reversing dpt-shell, a class-extraction packer, from the inside out to document how it protects and restores DEX classes at runtime, and the bypass logic broken down.
Tag: dex
Decrypting a Car Infotainment OTA Package
Decrypting a car infotainment OTA package, reversing the firmware's encryption and signing scheme so you can unpack and inspect the update contents, and the gotchas flagged along the way.
DEX VMP 101: Recovering Android DEX Virtualization and a Security Assessment
DEX VMP 101: recovering Android DEX virtualization from a real app, walking the unpacking and smali reconstruction, then assessing its security, and the code traced down to the core.
Deobfuscating libDexHelper.so: Inside an Enterprise Android Shell
Deobfuscating libDexHelper.so inside an enterprise Android shell, defeating its junk instructions, string encryption, and VMP layer with Unicorn and Frida.
ART Internals and How They Power Android Security
A deep look at ART internals across DEX loading, JIT and AOT compilation, and class initialization, and how these mechanisms power Android's security.
Writing a Class-Extraction Unpacker with Frida: FART's Active Invocation Chain, Reimplemented
Reimplementing FART's active-invocation unpacker from scratch in Frida, walking the ART call chain to dump every class a packed Android app actually loads.
FART: Automated Unpacking on ART via Active Invocation (Android 9.0 Source Adapted)
A deep dive into FART, the DEX unpacker that dumps Android apps by actively invoking every method in ART, with the Android 9.0 source adapted and the core anti-tamper workarounds explained.