Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

What do you think about https://pypi.org/project/DeStringCare/ ? #78

Closed
imannms opened this issue Jul 16, 2020 · 2 comments
Closed

What do you think about https://pypi.org/project/DeStringCare/ ? #78

imannms opened this issue Jul 16, 2020 · 2 comments
Labels

Comments

@imannms
Copy link

imannms commented Jul 16, 2020

DeStringCare

What is it?

It is a tool for extracting StringCare obfuscated secrets in Android apk files. Some of these StringCare protected secrets may contain API addresses and API keys.

https://pypi.org/project/DeStringCare/


What do you think about this?

@efraespada
Copy link
Member

@imannms I tried to use it with a basic sample but it didn't work for me.

Reading its documentation you can see this:

  1. Replace StringCare protected XML file at path apk/res/values/strings.xml.
    It may contain a line like the following:
    <string name="mixpanel_api_key">367E864309B5E7E3E6642483AF380497...</string>

This value 367E864309B5E7E3E6642483AF380497 is an old obfuscation type of SC.


Could you try using DeStringCare as well?

@efraespada
Copy link
Member

Reviewing the DeStringCare's issues I found this one.

Translated from Google:

It does not work with an array of bytes;

Doesn't work with latest versions of StringCare :-(
The problem is most likely due to the fact that StringCare switched to a byte array instead of hex, but maybe I'm wrong
Array of bytes in hex in C # looks something like this, alas, I do not write in python

@efraespada efraespada pinned this issue Jul 17, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants