Sunday, February 13, 2011

antilvl 1.1.3

just put up antilvl 1.1.3. a few small but annoying bugs fixed and some improvements with the hooks. pick it up from the usual spot: http://androidcracking.blogspot.com/p/antilvl_01.html

also had to do some major refactoring so people could make use of the source once it's released, and i think i got most of the kinks out.

while working on this, i noticed a few more apps that were using string encryption. maybe it will start to get popular? i wrote a proof of concept decryptor just to see how feasible it would be to convert dex to java .class files and run the apk's own methods to decrypt the strings. it worked but i want to make something more general. here's my idea:

  • start with an apk and disassemble
  • chose to decode literal strings (ex: const-string "some-encoded-string") or assume strings are the result of a function call (ex: invoke-static LStringHolder;->getString(v0)).
  • show all lines that match the above selection and allow for regex filtering. this way, if you pick literal strings and not all strings are encoded, you can filter for just the ones that are
  • decode strings by one of several methods: run the function, in the case of function-call encryption, built-in stuff like base 64, etc. or by using reflection on the classes of the apk. this way if every literal string in the apk is decoded through some function, i could use dex2jar to get the java class, dynamically load that and run each string through it.
the goal is to make the tool generic enough so that it's useful in the most situations. shouldn't be too hard. half of the work will be making my patching and apk libraries more generic and useful, so it wont be a total waste of time.

21 comments :

  1. how to use fpexclude? command prompt "java -jar antilvl.jar --fpexclude License Validator" don't work...

    ReplyDelete
  2. "don't work" = option not recognized? option parsing error? option has no effect? option has incorrect effect? option creates code that will not compile?

    ReplyDelete
  3. c:\1>java -jar antilvl.jar --fpexclude Hook File Size 2.apk
    -----------------------------------------------------
    AntiLVL - Android License Verification Library Subversion
    Version: 1.1.3 Updated: February 13th, 2011 By: lohan+
    For educational purposes only! :-D
    -----------------------------------------------------

    Error: File does not exist.
    Usage: java -jar antilvl.jar [options] <Apktool/Baksmali dump | Apk fi
    t Apk]
    Options:
    -f, --force Force overwriting
    -s, --skip-assembly Skip assembly
    -d, --detect-only Detect protection information only
    -n, --skip-nonlvl Skip Non LVL protection subversion
    -v#, --verbose# Verbose level (1-3)
    --sign-only Sign Apk file then exit
    --info-only Get App info then exit
    --assemble-only Assemble dump then exit
    --skip-cleanup Do not clean up any files while running
    --fplist List installed fingerprints
    --fpexclude Comma-separated fingerprints to exclude
    -h, --help Show this friendly message

    ReplyDelete
  4. try with quotes:
    java -jar antilvl.jar --fpexclude "Hook File Size" 2.apk

    ReplyDelete
  5. This is great stuff. antilvl's anti-anti features have saved me a ton of time. THANK YOU!

    ReplyDelete
  6. Great Article..Thanks for the sharing..

    Bigo live is a GooD APK.Connect friends.
    Install the application here.....

    Bigo Live App

    ReplyDelete
  7. Great Article..Thanks for the sharing..

    Bigo live is a GooD APK.Connect friends.
    Install the application here.....

    Bigo Live App

    ReplyDelete
  8. Nice Article. Thank you for sharing the informative article with us. Morpheus tv apk is the best online Streaming App.Click the below link to know more about
    Morpheus tv apk
    morpheus tv
    morpheus tv apk
    morpheus app
    morpheus tv ios
    morpheus tv on your windows

    ReplyDelete
  9. **SELLING SSN+DOB FULLZ**

    CONTACT
    Telegram > @leadsupplier
    ICQ > 752822040
    Email > leads.sellers1212@gmail.com

    >>1$ each without DL/ID number
    >>2$ each with DL
    >>5$ each for premium (also included relative info)

    *Will reduce price if buying in bulk
    *Hope for a long term business

    FORMAT OF LEADS/FULLZ/PROS

    ->FULL NAME
    ->SSN
    ->DATE OF BIRTH
    ->DRIVING LICENSE NUMBER WITH EXPIRY DATE
    ->COMPLETE ADDRESS
    ->PHONE NUMBER, EMAIL, I.P ADDRESS
    ->EMPLOYMENT DETAILS
    ->REALTIONSHIP DETAILS
    ->MORTGAGE INFO
    ->BANK ACCOUNT DETAILS

    >Fresh Leads for tax returns & w-2 form filling
    >Payment mode BTC, ETH, LTC, PayPal, USDT & PERFECT MONEY

    ''OTHER GADGETS PROVIDING''

    >SSN+DOB Fullz
    >CC with CVV
    >Photo ID's
    >Dead Fullz
    >Spamming Tutorials
    >Carding Tutorials
    >Hacking Tutorials
    >SMTP Linux Root
    >DUMPS with pins track 1 and 2
    >Sock Tools
    >Server I.P's
    >HQ Emails with passwords

    Email > leads.sellers1212@gmail.com
    Telegram > @leadsupplier
    ICQ > 752822040

    THANK YOU

    ReplyDelete
  10. I’ve been following your web site for some time now and finally, I decided to write this post in order to thank you for providing us such a fine content!!! Feel free to visit my website; 안전놀이터

    ReplyDelete
  11. I think this is one of the most significant information for me. And i’m glad reading your article. But should remark on some general things, The web site style is perfect, the articles is really great. Feel free to visit my website; 온라인카지노

    ReplyDelete
  12. Nice to be visiting your blog again. it has been months for me. Well this article that i’ve been waited for so long. I need this article to complete my assignment in the college. and it has same topic with your article. Thanks. great share Feel free to visit my website; 카지노

    ReplyDelete
  13. That is a very good tip especially to those new to the blogosphere. Short but very accurate info… Appreciate your sharing this one. A must read post. Feel free to visit my website; 토토

    ReplyDelete
  14. Great post ! I am pretty much pleased with your good post. You put really very helpful information. Feel free to visit my website; 온라인카지노

    ReplyDelete
  15. Thanks for such a fantastic blog. Where else could anyone get that kind of info written in such a perfect way? I have a presentation that I am presently writhing on, and I have been on the look out for such great information. 메이저토토

    ReplyDelete
  16. What an interesting story! I'm glad I finally found what I was looking for 메리트카지노.

    ReplyDelete
  17. You made some good points there. I did a Google search about the topic and found most people will believe your blog. 먹튀검증

    ReplyDelete
  18. I am very impressed with your writing카지노게임 I couldn't think of this, but it's amazing! I wrote several posts similar to this one, but please come and see!

    ReplyDelete
  19. webgirls.pl With regards to battling infections, patients often have their work eliminate for them. It is because candidiasis can easily become persistent and continuous. Bearing that in mind, on this page, we are going to present a variety of among the best verified candida albicans treatment method and prevention ideas all around.

    ReplyDelete

Do NOT post about or link to specific apps!