<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>Laurie Kirk: Runtime Manipulation in Android to Evade Analysis</title>
        <link>https://peertube.eqver.se/videos/watch/42fc9484-d428-4d0a-894d-f50d66cd9145</link>
        <description>A DEF CON 31 talk on a new Android obfuscation technique — runtime manipulation. This approach alters an app’s behavior during execution, disrupting normal control flow and making analysis with decompilers and emulators more difficult. The talk explains how to identify suitable injection points in Android code and implement such techniques in C++, intercepting Java methods via JNI and treating them as pointers. This enables hiding DEX loading traces and breaking cross-reference analysis in reverse engineering tools. It also introduces a custom library for Android 13, allowing researchers to experiment with runtime manipulation and modify internal Java object structures.</description>
        <lastBuildDate>Fri, 24 Jul 2026 11:25:55 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>PeerTube - https://peertube.eqver.se</generator>
        <image>
            <title>Laurie Kirk: Runtime Manipulation in Android to Evade Analysis</title>
            <url>https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png</url>
            <link>https://peertube.eqver.se/videos/watch/42fc9484-d428-4d0a-894d-f50d66cd9145</link>
        </image>
        <copyright>All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.</copyright>
        <atom:link href="https://peertube.eqver.se/feeds/video-comments.xml?videoId=42fc9484-d428-4d0a-894d-f50d66cd9145" rel="self" type="application/rss+xml"/>
    </channel>
</rss>