Releases: charles2gan/GDA-android-reversing-Tool
Releases · charles2gan/GDA-android-reversing-Tool
Bugs fix
- Fixed the bug that the right-click menu can't display the frida menu.
- Fixed the bug that code blocks are lost during TRY-CATCH structure restoration. #154
- Fixed the bug that API cross-reference results are incomplete.
- Fixed the bug that the reference method could not be automatically located in the smali code.
- Fixed the bug that clicking on the taskbar icon could not be minimized.
- Fixed the issue that the search results of combinations with string.
- Fixed the out-of-bounds crash when locating string search results.
Bugs fix, Optimization
- Fix the issue of incorrect method icons in search results.
- Fix the bug of null search result in binary search.
- Optimize the preview of binary search results.
- Fix the issue of incorrect position of top button.
- Enhanced XML decoding capabilities.
- Fix the issue of multithreading deadlock.
Bugs fix, Optimization and Updates
- Fix the issue of condition reversal when there are more than 3 consecutive conditions.
- Added resource search, supporting resource ID and name search.
- Add the extraction of referenced resource information and add resource cross-reference and double-click viewing functions.
- Fix variable name errors caused by register references.
- Fix a bug in the array initialization decompiling code
- Fix the bug of length calculation errors during string editing.
- Fix the issue where method codes of the interface are not displayed. #142
- Enhanced decoding ability of XML.
- Added topping and restoration for the package trees.
- Add code export function. #141
- Improved and expanded search functionality, optimized search algorithms. #140
- Fixed a series of crash bugs.
Bugs fix, Optimization and Updates
Bugs Fix and Optimizations:
- Optimized the rules for automatic renaming.
- Enhanced compatibility for irregular/adversarial DEX files.
- Optimized code exporting, fixed multithreading deadlock issue, greatly improving code export speed #136
- Fix the bug of logical errors caused by the loop header
- Optimize the taint propagation engine, further improving the analysis speed.
- Fix the bug of losing focus for selecting all in the search and the limitation of search length #137
- Optimize invalid jump labels.
- Fix the bug of losing some code blocks.
- Fix the issue of inability to operate strings in smali code.
- Enhanced decompression library to bypass anti-decompression tech.
Updates:
- Implement a lightweight smali compiler to edit and patch instructions by inputting smali code.
- Add an automatic code prompt function for SMALI code editing.
- Automatically write the DEX file back to APK.
- Implement automatic signature and installation of APK files.
- Add smali code rollback function (CTR+Z).
- Add junk instruction removal function, providing NOP direct filling and NOP folding function.
- Implement junk instruction removal through broad-spectrum matching rules.
serious bug fixes
- Fix the issue of no parameters when decompiling inline calls and quick-virtual-table calls.
- Fixed a serious bug of missing string-append operations in the code caused by the optimization in 4.05.
optimization, bug fixes and updates
- Add a function for simulator auto connection.
- Opens the device memory searching for publics in device dumper .
- Opens the device memory sensitivity information detection and retrieval function in device dumper .
- Optimizes dex checker's inspection strategy #126 .
- Fixed a bug of code wrap .
- Fixed a crash bug caused by vtable direct access to field #124 .
- Fixed a bug that could not be located to a specific method.
- Fixed a bug of renaming errors due to code type identification issues #123 .
- Fixed missing conditional expression parentheses.
- Improved the vulnerability scanning engine, improved checking speed and efficiency, and fixed multiple bugs.
- Adds extraction of the provider for the androidmanifest.xml.
- Fixed the inoperable bug for the key label
xxxx@xxxx
. - Fixed parenthesis issues in conditional expressions.
- Fix windows freezen bugs during loading.
- Fixed an error overwriting issue with field renaming #130
- Add a function of selecting (ctrl+all) and copying (ctrl+c) all the searching results #125
- Enhanced built-in dx tools for the jar files and improved compatibility for converting to dex.
- Added jumps to package, class, and method by strings in the Jump Window, not only by offsets .
- Fixed an bug that local variables could not be renamed.
- Added supportion of folder that including mutiple dexs that are not related to names.
Add the new vul rules:
1、Android hidden ui(cwe-919).
2、SQL Injection(SQLite).
3、Android soot detection.
4、Android screenshot.
5、Deserialization of untrusted data.
6、Arbitrary code execution.
7、Access to arbitrary components via WebView.
8、Creating insecure intents.
9、Starting insecure intents.
optimization, bug fixes and updates
- Optimize the taint propagation analysis engine, the analysis speed has been improved, and the stuck problem has been fixed.
- Fix the error that privacy-leaking cannot be output on the tree.
- Fixed the problem that could not display the colorful header.
- Fixed the jamming problem caused by the introduction of new features in version 4.03.
- Updated vulnerability scanning rules.
- Improve the toolbar and menu bar icons, and adjust the display of analysis results.
- Fix the problem caused by the invalid '-- no-pause' parameter in the higher version of Frida. #110
- Fix the de-obfuscation bug. #117
- Add the
attach by pid
to the Frida hook. #116 - Improve the dex checker. #114 #115
optimization, bug fixes and updates
- Improve the cross-reference of classes (all initialized places for a class are used as reference points)
- Change optimizer mode to global effective mode
- Fixed a bug in intelligent renaming. #99
- Fixed a lot of bugs in expression output. #103
- Fix a bug of inconsistency caused by variable symbol interruption. #103
- Fix the problem that cannot be 'stat' in process of the dumping device data. #108
- Updated the characteristics of malicious behavior.
- Double-click access feature of parameters is added in the method declaration.
- Add the new display modes for nondecodable strings, including forced decoding, ASCII, and UNICODE.
- Added the favorites function for classes and methods.
- Fix the problem of crashing when clicking import package in a few cases #112
- Strengthen the cross-reference algorithm and improve the cross-reference of inherited members.
- Optimize the search algorithm of the methods and fields in parent and child classes.
- Parse annotation and static value.
- Optimize the smali code and code-related operations.
optimization, bug fixes and updates
- the translation function for strings is added to multi-threaded mode to avoid jamming.
- fix the bug of renaming null variables.
- fix the problem that the non-standard APK cannot be processed.
- add support for
x86
andx86_ 64
device dump support (for the simulator). - add support for multi-device connection.
- the
Multi-DEX
initialization strategy is further optimized to improve the analysis speed. - when
renaming synchronized
andcross-referencing
for the inherited members. - add the memory function of access history.
- optimize structural analysis of nontrivial graphs (for subgraphs in n-way and rings).
- added classes access records.
- the optimizer mode is added(default mode). In this mode, internal classes and anonymous classes will be embedded into the external classes. (click
Menu Config>Optimizer Mode
to disable or enable) - fix a ghost bug that caused a crash.
optimization, bug fixes and updates
- Fix the bug that all nodes were deleted when searching the class tree
- Fix the bug that inheritance methods or members cannot cross-reference #91
- Fix the problem that the parameters/return-value are not displayed during data flow analysis #91
- Fix the problem about the python plug-in #92
- The constant propagation algorithm is optimized to correct the error of code output #90
- Optimize the expression output and correct several errors of code output #90
- The variable declaration and expression are further optimized
- Fix some crash bugs.
- Add translation utility for strings (with Google and Youdao).