mobilemedium

APKey

hackthebox

Task: Reverse engineer an obfuscated Android APK to decrypt a hidden flag. Solution: Decompile with jadx, trace obfuscated helper classes that build a Base64-encoded ciphertext and AES key from character positions across multiple arrays, then decrypt using AES-ECB.

$ ls tags/ techniques/
aes_ecb_decryptionapk_decompilationcode_deobfuscationstring_reconstruction

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]