these-android-re/thesis
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

more alt text
All checks were successful
/ test_checkout (push) Successful in 45s
Details

Browse source
This commit is contained in:
Jean-Marie 'Histausse' Mineau 2025-11-15 15:51:36 +01:00
parent c998dc27ac
commit f127c5533e
Signed by: histausse
GPG key ID: B66AEEDA9B645AD2
5 changed files with 95 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

17
5_theseus/5_results.typ
View file

@ -307,14 +307,19 @@ Although self-explanatory, verifying the code of those methods indeed confirms t
caption: [Code of `Main.main()`, as shown by Jadx, after patching],
)<lst:th-demo-after>
#todo[alt text for @fig:th-cg-before and @fig:th-cg-after]
#figure([
#figure(
render(
read("figs/demo_main_main.dot"),
width: 100%,
alt: (
"",
"A tree diagram. At the top, a node is labelled `Main->main()V`. ",
"Arrows goe from this node, down to four other nodes: ",
"`Main->decrypt(String)String`, `Method->invoke(Object [Object)Object`, ",
"`ClassLoader->loadClass(String)Class` and `Class->getMethod(String [Class)Method`. ",
"Arrows go down from `Main->decrypt(String)String` to 5 other nodes: ",
"Base64->decode(String I)[B`, `Cipher->init(I Key)V`, `Cipher->doFinal([B)[B`, ",
"`Cipher->getInstance(String)Cipher` and `String-><init>([)V`."
).join(),
),
caption: [Call Graph of `Main.main()` generated by Androguard before patching],
@ -325,7 +330,13 @@ Although self-explanatory, verifying the code of those methods indeed confirms t
read("figs/patched_main_main.dot"),
width: 100%,
alt: (
"",
"The same tree diagram as in the previous figure, but this time, they ",
"are 4 additionnal nodes under `Main->main()V`: ",
"`T->check_is_Malicious_send_data(Method)Z` and `T->check_is_Malicious_get_data(Method)Z`, ",
"both with a grey background, and `Malicious->send_data(String Activity)String` and ",
"`Malicious->get_data(String Activity)String`, both with a red background. ",
"An arrow goes from `Malicious->get_data` to a `Utils->sink(Activity String)V` ",
"node, and an arrow goes from `Malicious->get_data` to a `Utils->source(String)String` node."
).join(),
),
caption: [Call Graph of `Main.main()` generated by Androguard after patching],