APKiD

APKiD copied to clipboard

https://gitee.com/yunyoo/urpackerusermanual https://gitee.com/yunyoo/UraniumPacker

enovella

- Repo: https://github.com/bluesadi/Pluto-Obfuscator - Sample: http://180.76.60.244:1111/update/apk/2.9.5.apk ```sh [+] APKiD 2.1.4 :: from RedNaga :: rednaga.io [*] ./2.9.1_r.apk!classes.dex |-> anti_debug : Debug.isDebuggerConnected() check |-> anti_vm : Build.BOARD check, Build.FINGERPRINT check, Build.HARDWARE...

enovella

[DETECTION] Detect Open-Obfuscators: O-MVLL & dProtect

1

https://github.com/open-obfuscator

enovella

[DETECTION] separate XPOSED detection from the rest

3

**Provide the file** https://play.google.com/store/apps/details?id=de.telekom.android.customercenter **Describe the detection issue** The App prints a big warning about XPOSED being on the physical device. I think we should not only say anti_VM but...

yoshimo

[DETECTION] AndResGuard resource protection

2

I came across some APKs that uses resource protection that looks like this  It's not known what tool they are using yet. I think it might be a chinese...

Yehh22

[DETECTION] Blackmod modder

1

# Samples: Get samples @ https://t.me/Blackmodnet - MD5 (hero-wars-v1.191.000-mod.apk) = 7dc699ee3d3dc090fb8bcc47feb95a19 - MD5 (Legend-of-Survivors-v0.1-mod.apk) = 93d34502fb77d1136b41ad1e1cd0f115 - MD5 (Live-or-Die-Survival-v0.4.8-mod-v4-GameDVA.com.apk) = 11e07f018fa061c2dfeebb4777a9d361 /cc @Yehh22 Do you know what it changed?

enovella

# INTEL ```腾讯乐固（VMP） 🔴lib lib/arm64-v8a/libxgVipSecurity.so lib/armeabi-v7a/libxgVipSecurity.so 🔴apk assets/libwsDataEncryption_AZAPP.so assets/libwsDataEncryption_AZAPP_arm64.so assets/libwsDataEncryption_AZAPP_x86.so assets/libwsDataEncryption_AZAPP_x86_64.so assets/wsDal.jar assets/WSSECA.jar assets/WSSECB.jar assets/WSSECC.jar assets/WSSECD.jar assets/wslib/arm64-v8a/libWSSec.so assets/wslib/arm64-v8a/libWSSecV.so assets/wslib/armeabi/libWSSec.so assets/wslib/armeabi/libWSSecV.so assets/wslib/x86/libWSSec.so assets/wslib/x86/libWSSecV.so assets/wslib/x86_64/libWSSec.so assets/wslib/x86_64/libWSSecV.so 🔴dex ws.sec.vmp ws.sec.application WSSec WSSec_x86 WSSecV...

enovella

🛑🛑🛑 通付盾 Tongfu shield https://tongfudun.com https://m.tongfudun.com 🟢example: com.kingdee.zhihuiji 6.25.22 assets/mode assets/PK assets/virtual assets/libegis.a lib/arm/libegis.so com/payegis/FirstApplication com.payegis.entry egis egis-x86 🛑🛑🛑 腾讯御安全企业版 Tencent Security Enterprise Edition https://cloud.tencent.com/product/ms http://www.fron.com.cn/yaq/ 🟢example: com.qidian.QDReader 7.9.352 assets/dexMethod_00oo1l1l.dat...

enovella

[DETECTION] 5play string encryption

2

**Describe the detection issue** 5play recently implemented their own string encryption in smalis. It calls a native function from libRMS.so to decrypt strings. It would be great to detect it...

Yehh22