PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Smali the Parseltongue Language

blog.quarkslab.com | research | #android | #reverse-engineering | #apk | #smali | #dex | #binary-patching
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A practical guide to reading and writing Smali, Android's DEX intermediate representation: why analysts patch apps at the Smali level, and how to repackage an APK cleanly.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · blog.quarkslab.com
A Glimpse Into Tencent's Legu Packer
An analysis of Tencent Legu, a state-of-the-art Android APK packer: its native libraries, the container format holding NOP-ed DEX files, hashmap, NRV compression and XTEA-based encryption.
research · blog.quarkslab.com
Android Application Diffing: Analysis of Modded Version
Third part of the Android diffing series: combining the diff engine with Redex to inspect a modded, ad-stripped music-streaming app and locate injected or altered code despite obfuscation.
research · blog.quarkslab.com
Android Application Diffing: Engine Overview
First of the Android diffing series: challenges of similarity detection in Dalvik/APK code versus native binaries, and the design and benchmarks of Quarkslab's diff engine.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
Back