← all write-ups

Android APK reverse engineering

CHALLENGE
Android APK CTF
CATEGORY
Reverse engineering
TOOLS
—
STATUS
Draft

DRAFT — the walkthrough below is not yet written. Add your real tools, steps, evidence and result before publishing. Never publish invented steps or flags.

Summary

As part of CTF practice I reverse engineered Android APKs to uncover hidden logic and recover flags. The work was static in nature: taking the packaged app apart and reading what it actually does, rather than what it shows.

Tools

Add the exact tools you used for this challenge (for example apktool, jadx, or the Android SDK tooling).

Steps

Write the walkthrough in order: how you obtained the APK, how you decompiled it, what you looked for, and where the hidden logic lived.

  1. Acquire and verify the APK — fill in
  2. Decompile and inspect the structure — fill in
  3. Locate the hidden logic / comparison — fill in
  4. Recover the flag — fill in

Result

Add what you recovered and how the challenge was solved. No flag or outcome is published here until you confirm it.

Lesson learned

Add the one thing this challenge taught you that you would carry into a real investigation.

Related work: the same reverse-engineering mindset feeds the 14-field coverage map on the CV page — this field moved to “hands-on” because of work like this.