Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-15 01:17:36 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add information relevant to the Xamarin AssemblyStore

Browse source 
The Xamarin AssemblyStore is the currently recommended
  way of packing Xamarin DLLs in Android applications.
  pyxstore will unpack the DLLs found in the assemblies.blob
  to perform further analysis. This commit describes that
  process in some detail.
This commit is contained in:
KhasMek 2023-09-01 16:55:22 -06:00
parent 740558eb2e
commit bef705546e
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
mobile-pentesting/xamarin-apps.md
View file

@ -80,6 +80,12 @@ In case of Android **APKs these dll files are compressed** and cannot be directl
python3 xamarin-decompress.py -o /path/to/decompressed/apk
```
It is possible instead of dll files you will see `assemblies.blob` and `assemblies.manifest` in the assemblies directory. This is a Xamarin AssemblyStore and the currently recommended way to pack dlls in an Android application. The `assemblies.manifest` is a text file describing the contents of the binary file `assemblies.blob`. To unpack these you will need use [pyxamstore](https://github.com/jakev/pyxamstore).
```
pyxamstore unpack -d /path/to/decompressed/apk/assemblies/
```
In the case of the iOS, **dll files inside the IPA files can be directly loaded** into a decompiler (no need to uncompress anything).
**Most of the application code can be found when we decompile the dll files.** Also note that Xamarin Framework based apps contain 90% of common code in the builds of all platforms like iOS and Android etc. 
@ -105,6 +111,7 @@ Try to check if the application has any kind of SSL pinning in place. If not, us
## References
* [https://www.appknox.com/security/xamarin-reverse-engineering-a-guide-for-penetration-testers](https://www.appknox.com/security/xamarin-reverse-engineering-a-guide-for-penetration-testers)
* [https://thecobraden.com/posts/unpacking_xamarin_assembly_stores/](https://thecobraden.com/posts/unpacking_xamarin_assembly_stores/)
<details>