@programming.tz: jinsi yaku decompiler apk app... #jifunzekitu #programmingtz #portswigger #kalilinux

Aux Grep :

Mmmh that is not completely reverse engineering hapo ulichofata ni kudecompile to reflected java files, sasa hivi most of companies wanatumia flutter kubuild obfuscated apps . Sasa apps nyingi flutter au normal javaa apps hutumia AES encryption kuficha sensitive data kama tokens, credentials, na payloads, hivyo uki-intercept traffic data inakuwa encrypted na haisomeki bila IV na KEY ambayo hutumika for decryption . Pia hutumia SSL Pinning kuzuia Man-in-the-Middle (MITM) attacks. App ina-trust certificate yake maalum tu, hivyo proxies kama Burp Suite au MITM PROXY mara nyingi haziwezi ku-decrypt traffic kirahisi. AES + SSL Pinning = extra layer ya security dhidi ya interception na reverse engineering. SO SIO KWAMBA NI NGUMU KUCRACK HIO AES + SSL PINNING hapana ni rahisi sana . Kama ulivyosema most of developers wanajisahau sana na kuhard code IV au KEY , most of then ni KEY ambayo by default flutter inahard code kwenye libapp.so kitu ambacho ni rahisi kujua encryption using radare (r2) and frida

Hassan :

hivi ukidownload app kwa palystore apk unaipata?? maana inaji install moja kwa moja??

BRAVE :

kaka unapatikana wapi

marvelous_studio :

🤣🤣🤣🤣 bro to bro code chukua soda mm ntalipa

xandercage :

una i reverse engineer

Windowseven :

kaka always uwe unaweka caption., for education purpose.., then mwishoni pia remind watu kuwa.., do at your own risk.., hii itakufanya uwe on the good side fam.., lakini you're 🔥🔥🔥.., keep it up broo!!

HANS✨✨ :

Pamoj sana kiongozi keep it up

𓄂ᬼ𓆃King's of A.H.K :

hizo API ukizigundua utazifanyia nini...🤣😂

Calvinkzb :

Yani mbongo unasikia ApK afu atakuambia ya play store kua inafaa ku decompile 😂

The Gost ☠️ :

sio rahis hvyo app nying zinatunza api zake kwenye server sio rahis hvyo ukute api ziko ndan ya apk

macharia :

Mr @ nakuchek inbox

Ethical_Hacker :

also reverse engenering sio web exploitation kakak just read about reverse engenering. apo kwenye reverse engenering tuna zungumzia sana kuhusu luga ya assembly . iyo ni luga ya machine language kaka ambapo pia kwenye reverse unasoma vitu3. 1.register 2.CPU 3.Memory kwenye reverse engenering tuna soma the way data zina be communicate na CPU so tuna soma izo regester na amri zake za Jump . ili kusoma tuna ingia kusoma luga ya assembly then tunakuja kusoma sasa izo luga za kawaida kama python .js,c++ au C. ndo tuje tufanye reverse engening but kasome utaelewa kuwa web exploitation sio reverse engenering. 🤣🤣🤣🤣

🇹🇿_bEnTiGeR_🇰🇪 :

haitamkwiii haideni❌❌ ni hivi- hideni✅✅

🅾🅵🅵🅸🅲🅸🅰🅻_🅼🅰🅳🅾🅽🅺 :

it works for Java website

massco99 :

🤣🤣😅🤣🤣🤔🤔 ndio

. :

Na facebook inawezekana kupata API zake 😂

bboe :

Ethical_Hacker :

API sio gate za wewe kuweza kupenetrate una takiwa kujua api penetration testing ... so apo jua ilo sio kila API unaweza kutumia ku penetrate. labda vi application vya kawaida

Azomingo :

niite mbwaa wakiiache bila server validation checks lkn tools za dynamic reverse engineering zipo x64dbg, kwa static ida pro na ghidra ya Nsa lkn sio kazi rahisi mwanangu 😅

M̷r̷ :

can i drop my website for penetration testing if you can catch anything useful💀

Yekah tr :

👍👍👍

shabararashabani9 :

hapa nayakubali haya mambo lazima ni comment chochote