lib(so*) control flow

😣 The internal stub.a is embedded. I’m aware that some developers try to dump process memory to recover the original lib.so, but for my scenario this approach is not feasible

Google加固 Apks split vdex Injection Objectlogger

Main idea Directly inject the ObjectLogger into base_split1.vdex.

✅ No need to replace base.apk
✅ No need to manually add ObjectLogger
✅ Works with paired APKs
😁 No need to convert APKs or edit the APK files at all

Hook Tools Source Code

Developed - @aantik_mods

Old Project 🎁

Dev - @aantik_mods

DexEntry Hook

Encrypting is enug??

lib.so obfuscation tools

FEATURE ---[/]

LZMA ultra compression
Custom stub injection
Fake segments
Section confusion
Dynamic table shred
Extra anti-Ghidra patch
Anti-Frida optimized

For ARM64 APK, you must enable this option before patching with Android Shield

Author - @RevDex
Dev - @aantik_mods

Bro I didn’t get any comments from anyone. please let me know what’s going on. at least give me one feedback is it working or not? And tell me which part needs improvement

🤔I guess 90% of them are my haters that’s why no one is giving any feedback

lib.so obfuscation tools / tutorial

Api response hijack

🐛 watcher

🐛 overwriter

Tutorial soon 😁👍

Modded by @RevDex

Dev - @aantik_mods


https://www.youtube.com/watch?v=s3O8Ek50Bu0

Modded by @RevDex
Tutorial: https://www.youtube.com/watch?v=s3O8Ek50Bu0

This is a React Native app, but the OkHttp3 system says I don’t care, bro. 😁🤡🤦

When I checked the app, first I saw it was making a PHP request. But after that request finished, I noticed more PHP requests happening, like getaccount_V15.php. I searched the whole APK, every folder, every smali file, but I couldn’t find these PHP request URLs anywhere. Then I understood something was fishy in their main system.

So I tried index_v15.php. Inside that, I found a hidden schema which was connected with the app. I opened it using the browser developer tools, and then I was shocked— all the premium features, account login, account check, everything was fully controlled from one JavaScript file. At that moment, everything became clear to me.

After that, I opened Android Studio and loaded index_v15.php inside a WebView. I tried to hook the JavaScript and change some values to unlock premium. But then I understood the real problem: the JS was running inside an iframe. When JavaScript runs inside an iframe, you cannot directly hook or modify it using normal JS injection. So my injected noscript was not working.

Then, using a special technique, I bypassed the iframe restriction and successfully injected my own JavaScript.

free/431075/PIXTA FREE ACTIVE/false/
pro/431075/PIXTA PRO ACTIVE/true/

I changed

free → pro
false → true

And premium got fully unlocked. No ads, all pro features activated.

Finally, I created my own custom Android app, loaded their original WebView, injected custom JS, and completely bypassed their premium system

https://play.google.com/store/apps/details?id=com.pixta.thumbnailmaker 😐

Cooked 😐

@RevDexbot

Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail
https://m4kr0x.medium.com/flutter-tls-bypass-how-to-intercept-https-traffic-when-all-other-frida-noscripts-fail-bd3d04489088

Emulator Bypass Free Fire ( Redirect Api)

Reverse Engineering ( Online Game)

adb push mitmproxy-ca-cert.crt /system/etc/security/cacerts/9a5ba575.0
adb shell chmod 644 /system/etc/security/cacerts/9a5ba575.0
settings get global http_proxy
settings put global http_proxy 127.0.0.1:20010
adb shell settings put global http_proxy ""

http://mitm.it

Must need adb enable BlueStacks or others emulator

https://github.com/mawo95/pairip
兄弟，你可以试试看这个项目吗😁

Mod Menu for Survival Simulator project
✔️ Aimbot
✔️ ESP
✔️ Telekill
✔️ Mask Kill
✔️ 360° Auto-Aim
✔️ Fly Mode
✔️KickPlayer
✔️KickRPC

no java fully imGUI ESP

C++ HOOK BY - @aantik_mods

Survival Simulator 0.2.3

YouTube SDK ( New ) Downloader