June 24, 2022 11:15 AM (GMT+2) - Georges-Bastien Michel
Today most of serious mobile applications relay on industrial-grade software protection tools to detect and slow down reverse engineering. It forces attackers to waste a precious time bypassing obfuscation and RASP before deep diving into app specific logic. So, If each tool tries to detect non-app specific threats such as hooking, rooted device, emulator, debugger, rogue certificate, and so, we postulate we can design an universel tool to bypass all of them. In our talk, we start by reversing protections from most popular and certified Android app protection tools, and we follow by designing instrumentation to defeat all of them.
🇫🇷 Forging golden hammer against Android software protection tools - Georges Bastien Michel
SPT = Software Protection Tools
RASP = Runtime Application Security Protection
SVC = SuperVisor Call = sys call interrupts for arm64
Koodous + Yara rules = finding applications with specifics patterns
