PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Android Application Diffing: Engine Overview

blog.quarkslab.com | research | #android | #tooling | #apk | #binary-diffing | #dalvik | #similarity-detection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

First of the Android diffing series: challenges of similarity detection in Dalvik/APK code versus native binaries, and the design and benchmarks of Quarkslab's diff engine.
Published
Collected

Related coverage

research · blog.quarkslab.com
Android Application Diffing: Analysis of Modded Version
Third part of the Android diffing series: combining the diff engine with Redex to inspect a modded, ad-stripped music-streaming app and locate injected or altered code despite obfuscation.
research · blog.quarkslab.com
Smali the Parseltongue Language
A practical guide to reading and writing Smali, Android's DEX intermediate representation: why analysts patch apps at the Smali level, and how to repackage an APK cleanly.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · eshard.com
Can AI bring Mobile Application Security Analysis in-house?
Can AI bring mobile app security analysis in-house? See how Epoch's time travel traces and an AI agent test an Android app against OWASP MASVS.
Back