How PRoot Works: A Source-Level Walkthrough
How PRoot works under the hood, a source-level walkthrough of its ptrace-based syscall emulation that fakes a root filesystem without root, with the tools and offsets documented.
Tag: emulation
Unidbg: Black-Box Magic for Android Native Reversing
Unidbg as black-box magic for Android native reversing, showing how to emulate SO files to call and trace JNI functions without a device or debugger, for anyone reversing similar targets.
Emulating an aarch64 Shared Library with Qiling and Reversing Its VM-Protected RC4
Emulating an aarch64 shared library with Qiling and reversing its VM-protected RC4, decrypting the cipher without native hardware, with a full walkthrough of the technique.
A New Approach to Emulating and Debugging the Android Runtime
A new approach to emulating and debugging the Android runtime with Qiling and Unicorn, attaching GDB to ART and JNI for deeper native analysis, with the tools and offsets documented.