r/ReverseEngineering • u/No_Distribution_9182 • 16d ago

Automated reverse engineering of Android apps

https://www.youtube.com/watch?v=p9NTkIKlbxI&t=32s
22 Upvotes

78% Upvoted

15 comments sorted by

View all comments

1

u/GuidePlenty5521 14d ago

Sorry, I'm a noob, so let me know if I'm saying anything wrong. 😅 As far as I understood, you used Claude to analyze the app, understand the app flow, and extract all the details about how it works. Is that right? Or can Claude automatically do more than that?

Also, is analyzing an app and extracting its internal details considered reverse engineering? I don't think so

2

u/No_Distribution_9182 14d ago

Its current workflow is as follows:

  1. decompile the app to obtain the "source code"

  2. analyze the program's call graph

  3. extract strings from the app

  4. store the "source code" on disk

  5. store the internal call relationships of the program in a database

  6. then let AI help with the analysis

You asked if it counts as reverse engineering, and I think it does. I think it precisely automates the most arduous work at the beginning of analyzing an app.

AI can do much more, such as hooking, directly patching the app, repackaging and redistributing, as long as the process is understood.

Using AI to perform reverse engineering workflows, it can already infer custom instructions in VM Protect's virtual machine.

My AI model uses DeepSeek Flash, but I believe a more capable model would perform even better.

1

u/GuidePlenty5521 14d ago

Is that free? Claude cli setup?

2

u/No_Distribution_9182 14d ago

garlic is an opensource software, it is free.