APKrypt [easy]: HackTheBox Mobile Challenge (patching .smali code with apktool)
Video walkthrough for retired @HackTheBox (HTB) Mobile challenge "APKrypt" [easy]: "Can you get the ticket without the VIP code?" - We'll reverse engineer an APK file with jadx-gui, modify and repackage .smali code with the apktool, debug/profile with android-studio etc. Hope you enjoy 🙂 #HackTheBox #HTB #CTF #Pentesting #OffSec
Sign up for HackTheBox: https://hacktheboxltd.sjv.io/xk75Yk
↢Social Media↣
Twitter: / _cryptocat
GitHub: https://github.com/Crypto-Cat
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: / cryptocat
Reddit: / _cryptocat23
YouTube: / cryptocat23
Twitch: / cryptocat23
↢HackTheBox↣
https://affiliate.hackthebox.com/cryp...
/ hackthebox_eu
/ discord
↢Resources↣
Ghidra: https://ghidra-sre.org/CheatSheet.html
Volatility: https://github.com/volatilityfoundati...
PwnTools: https://github.com/Gallopsled/pwntool...
CyberChef: https://gchq.github.io/CyberChef
DCode: https://www.dcode.fr/en
HackTricks: https://book.hacktricks.xyz/pentestin...
CTF Tools: https://github.com/apsdehal/awesome-ctf
Forensics: https://cugu.github.io/awesome-forensics
Decompile Code: https://www.decompiler.com
Run Code: https://tio.run
↢Chapters↣
Start: 0:00
Android reversing basics: 0:37
Decompile APK with JADX-GUI: 3:29
Unpack with apktool: 6:20
Patch .smali and repackage: 9:07
Debug APK with android-studio: 11:12
Sign APK (keytool/jarsigner): 12:00
Run app in emulator: 13:28
End: 14:57