Android Reverse Engineering - Part 2 | Cocos2D Analysis

Поділитися
Вставка
  • Опубліковано 6 лют 2025
  • Get ready for a Block Blast of fun! In this video, I dive into reverse engineering the Android game BlockBlast (available here: Google Play) and discover it’s built with the Cocos2d framework and the libcocos2d native library. Watch as I decrypt the hidden embedded JavaScript that’s protected by the XXTEA algorithm and a custom encryption scheme. You’ll see how I unpack the files, make some playful tweaks, then re-encrypt and pack it back into the app-truly blowing apart the walls of Block Blast in the most entertaining way possible. If you’ve ever wanted to learn about reverse engineering an Android app, this is your front-row seat to the block-blasting action!
    Encrypt.py, Decrypt.py and RegSearch.py all can be found here:
    gist.github.co...
    #cybersecurity #reverseengineering #ghidra #re #android #cocos2d #libcocos2d #xxtea #decrypt #customencryption #blockblast #gamedev #javascript #unpack #repack #androidgame #appmodding #hack #coding #programming #tech #security #tutorial #embeddedjavascript #mobilegaming #gamemodding #appdevelopment #fun #reverseengineer #techie #codinglife #engineer #androidapps

КОМЕНТАРІ • 16

  • @logo2453
    @logo2453 3 дні тому +2

    How did you learn all that stuff, I mean thats just impressive. Do you have any advice on how to get into reverse engineering? I recently got ida pro and reverse engineered assault cube a bit but I want to go deeper. Do you have any learning recourses to get more into reverse engineering because I think its really fun

    • @TechnicallyUnsure
      @TechnicallyUnsure  3 дні тому

      This is my job professionally, I reverse engineer stuff. As for learning, I would highly recommend playing CTFs, getting reverse engineering puzzles and solving them. It all comes from experience. Write some code in C++, compile it, then load it in IDA/Ghidra and see how things look. Also knowing assembly language helps when you are reverse engineering binary files.

  • @mc16119
    @mc16119 9 днів тому +3

    Reverse engineering is fun, yes-assuming you actually know what you’re doing. If not, you’ll be starring in your own horror flick, pulling out your hair and howling at the screen while you desperately try to decode the digital gobbledygook!

    • @oof-software
      @oof-software 9 днів тому

      That's true even if you know what you're doing, it just depends on how good the protection is :P
      I failed against Diablo 2 Resurrected because it executes unaligned instructions (jump in the middle trick) and that made reversing very annoying.
      Also if you're not fully invested and encounter libpairipcore in an Android app, just stop.

  • @Jp-ue8xz
    @Jp-ue8xz 8 днів тому +1

    do we *have* to be based in the US? :')

  • @cutterjohn1000
    @cutterjohn1000 8 днів тому

    unfortunately it's now lunar new year in full swing, so you're probably kinda screwed getting one in less than 3w...
    [EDIT]
    BTW Imma just a little bitter since the milkv oasis board went poof since sophgo fscked up... but not as much as I am annoyed at all the ARM fanbois, and their useless diatribe...
    ...as last I checked Apple's thermal solution amounted running their chips right up to Tjunc then throttling down then rinse repeat, which also equates to what they eseentially did on x86...
    [/EDIT]

  • @mgbtech
    @mgbtech 2 дні тому

    How To Reverse Engineering Online Game Like Casino Games 3patti

    • @TechnicallyUnsure
      @TechnicallyUnsure  2 дні тому

      Lots of casino games also use Cocos2D which you can use methods described here to analyze them

  • @oof-software
    @oof-software 9 днів тому +3

    UA-cam deleted my comment once more

    • @jzlazy05
      @jzlazy05 9 днів тому +1

      We should leave this platform once and for all.

    • @TechnicallyUnsure
      @TechnicallyUnsure  8 днів тому

      What was the comment? Did it include links?

    • @oof-software
      @oof-software 7 днів тому

      @@TechnicallyUnsure I replied to the first comment, I think you can see it if you sort by newest comments.

    • @TechnicallyUnsure
      @TechnicallyUnsure  7 днів тому

      Unfortunately can't see your comment, its not even in "held for review" section for me.

    • @oof-software
      @oof-software 7 днів тому

      @@TechnicallyUnsure It's a reply to @mc16119's comment and not to this one in case that was unclear. But don't bother, I'll still watch your videos, I just wont comment. Also thanks for at least acknowledging this.