Esther codes

Static call graph extraction from Android application

When you study the behavior of an Android application, you would have to determine if a specific Java method is called either by the application code or by a third-party code. The easiest way to tackle this problem is to use Androguard. We will see how it is easy to…

Reverse engineering: Google Location protobuf specifications

While driving with Waze as travel companion, Waze periodically sends various information to the Google Location Service using compressed protobuf messages with the MASF protocol. Packet overview With MITMProxy, it is easy to capture traffic generated by the application. As an example, here is the screenshot of a captured message…