Get used to the Tools Solution
There is not the solution to this task. Just get familiar with the toolkit. Below are some commands you can use to interact with the android phone, the app or the source code.
| Command | Comment |
|---|---|
adb connect 10.13.13.101 |
Connect adb with the device on 10.13.13.101. |
adb shell |
Android Debug Bridge (adb) is a command line tool that lets you communicate with an emulator or connected Android device. ‘shell’ is used to spawn a shell for further actions. |
adb shell pm list packages |
list installed packages (e.g. package:ruhrpott.owasp.com.vuln_app_1) |
adb root |
Elevate to root permissions to pull the APK file in the next step |
adb pull /data/app/ruhrpott.owasp.com.vuln_app_1/base.apk . |
download APK file to current folder |
d2j-dex2jar.sh base.apk |
retrieve dex files from apkr |
java -jar jd-gui-1.4.0.jar base-dex2jar.jar |
graphical interface to browse source code |
java -jar apktool_2.2.0.jar d base.apk |
retrieve dex files and decode resources |
Please note: The Ubuntu VM contains command hints that are useful.