Dancing with Dalvik

Presented at DerbyCon 3.0 All in the Family (2013), Sept. 27, 2013, 7 p.m. (50 minutes)

So you’ve reversed you’re first Android APK; now what? Java pseduocode is nice, but how do we modify the app? This is a crash course in reading and understanding Davlik opcodes. It will go through some basics then we will jump into a couple case studies to demonstrate some of the concepts. This talk should help testers who are interested in or do Android application assessments to better understand how to mess with the underlying code.

Presenters:

• Thomas Richards
  Thomas Richards is a Security Consultant with Cigital, Inc. where he specializes in mobile and web security assessments. He is the author of both Pwnberry Pi and Goofile. He is also active in his local 2600 and TOOOL groups.

Links:

• https://infocon.org/cons/DerbyCon/DerbyCon 3 2013/video/Dancing With Dalvik Thomas Richards.mp4

Similar Presentations:

• DeepSec 2014 „Do you want to know more?“ / Creating a kewl and simple Cheating Platform on Android
• 30C3 (2013) / Android DDI: Dynamic Dalvik Instrumentation of Android Applications and the Android Framework
• Summercon 2013 / Introduction to Dynamic Dalvik Instrumentation (on Android)