PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

DJI - The ART of obfuscation

blog.quarkslab.com | research | #android | #reverse-engineering | #obfuscation | #art | #dji | #packer
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A detailed analysis of the modified SecNeo packer protecting DJI Pilot: how DJI hijacks the Android runtime (ART) for bytecode injection, with a Python proof-of-concept (DxFx) for static unpacking.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
research · volexity.com
GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically
# GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically April 1, 2025 Killian Raimbaud and Paul Rascagneres In the course of its investigations, Volexity...
research · eshard.com
Unfolding obfuscated code with esReverse - Part I (full write-up)
We take the Grehack 2015's challenge scoring the highest number of points over all categories (cryptography, exploit, reverse engineering, etc.) using esReven.
research · blog.quarkslab.com
Defeating AI-Assisted Reverse Engineering (or at Least Trying To)
This coverage gives security teams current context for monitoring, validation, and remediation.
research · blog.quarkslab.com
A Glimpse Into Tencent's Legu Packer
An analysis of Tencent Legu, a state-of-the-art Android APK packer: its native libraries, the container format holding NOP-ed DEX files, hashmap, NRV compression and XTEA-based encryption.
Back