Recovering a Car App's `sd` Signature: White-Box AES and DFA Key Recovery
Recovering a car app's sd signature, reversing the signing algorithm behind the vehicle-control API to craft valid signed requests, and the code traced down to the core.
Tag: unidbg
Calling the TikTok Signature SO Directly with unidbg
Calling TikTok's signature SO directly with Unidbg, emulating the native library so you can generate valid signatures without running the app, with the algorithm recovered in detail.
Decrypting a Car Infotainment OTA Package
Decrypting a car infotainment OTA package, reversing the firmware's encryption and signing scheme so you can unpack and inspect the update contents, and the gotchas flagged along the way.
Unidbg: Black-Box Magic for Android Native Reversing
Unidbg as black-box magic for Android native reversing, showing how to emulate SO files to call and trace JNI functions without a device or debugger, for anyone reversing similar targets.
Analyzing the ttEncrypt Algorithm with Unidbg
Analyzing the ttEncrypt algorithm with Unidbg, emulating the native ARM64 library to recover its AES and SHA-512 structure without a device, so you can reproduce it yourself.
Reversing the sign Algorithm of a Major E-commerce App
Reversing the sign algorithm of a major e-commerce app with Charles, Jadx, Frida, Unidbg, and IDA to reconstruct the MD5-based request signature step by step.