Android Emulator

Android Emulator

• Install Genymotion
• Add Android Device - Google Nexus 6 (6.0 - API 23)
• Install Google Apps, Chrome, GetContact, RootExplorer
• Install Xposed Installer v3.1.4
• Install module SSLUnpinnig Certificate Pinning Bypass
• Unpin app Getcontact
• Run BurpSuite for Android
• Install certificate

View AES Key

cd /opt/genymobile/genymotion/tools
./adb shell

cat /data/data/app.source.getcontact/shared_prefs/GetContactSettingsPref.xml | grep FINAL

Frida

./adb push ~/frida-server-14.2.8-android-x86 /data/local/tmp/frida-server
./adb shell
su
cd /data/local/tmp/
chmod 755 ./frida-server
./frida-server

(new tab)
frida-trace -i "open" -U app.source.getcontact
frida -U -l ./__handlers__/libc.so/commads.js app.source.getcontact

commads.js

Java.perform(function x() { 
    console.log("Decrypt strings")
    var instance = Java.use("bo"); // bo - Java class name
    console.log(instance.class.getFields()) // print all fields of class
    console.log(instance.ɩ()) // ɩ - call method ɩ of class 'bo'
    
});

enum.js

Java.perform(function() {
    Java.enumerateLoadedClasses({
        onMatch: function(className) {
            console.log(className);
        },
        onComplete: function() {}
    });
});

JADX

~/Software/git/jadx/build/jadx/bin/jadx-gui