Discover Secrets in React Native Apps | Hack the Box Don't Overreact

In this video I solve the Don't Overreact challenge from Hack The Box. This challenge involves using static analysis to find hardcoded strings in an Android app that was built with React Native.
Check out my new website here:
corsecure.blog
Sign up for Hack the Box with my affiliate link:
hacktheboxltd.sjv.io/VmGgeE

[@CorSecure]

You can sign up for Hack the Box VIP to access this and many other retired challenges with my affiliate link here: affiliate.hackthebox.com/ylhzfj9qpzwd

[@wardellcastles]

Thanks for the shout out! Love your channel. Yes please continue with more HTB Android CTFs when they retire!

[@nicholascastles]

Haha I know this guy👀

[@amyt5031]

Great video! Thanks for sharing

[@Rev.Eng.-ru7hw]

Love It Brother, Can You Create A Complete Series On React Native Patching. Because This Index Bundle Is Normal But There Will Be Some Which Is Obfuscated.

[@cedricflutter311]

Do you also have experience with flutter app security?

[@0xfsec]

Love all your android hacking videos.. Please do a content for ios hacking too..

[@CorSecure]

Thanks! I'll try to come up with some ideas for iOS hacking soon.

[@aadityaa72]

Thanks for the video!. Please create a video on how to modify and recompile and sign apk and install in android.

[@CorSecure]

I actually covered that in my solution to one of the other Hack The Box challenges that I already recorded, but I can't post it until that challenge is retired. If they don't retire it soon, I can make a separate video on that topic.

[@CorSecure]

I was just reminded that I already posted a video covering this topic, and I remembered your comment and wanted to let you know. In the video linked below, I edit an APK and then re-sign it and install it on an android device. I hope this helps! kzbin.info/www/bejne/joLVlWaPgJmcsLM

[@aadityaa72]

@@CorSecure thanks for your reply. I have already seen that video and was succeed to do that. Thanks alot for this video. But from modify means modifying source code. Just like how there are clones like KZbin vanced, gb whatsapp. How they add extra features since writing in .smalli files is very difficult

[@CorSecure]

That would require some more advanced reverse engineering and development that is a bit outside of my expertise. If I had to do something like that though, I would start by decompiling the APK with jadx. Then importing that Java code into Android Studio and making whatever code changes necessary there. I'm not a developer though, so I don't really feel qualified to go into much detail on that kind of project.

[@aadityaa72]

@@CorSecure Thanks😄