{"id":13464054,"url":"https://github.com/corellium/corellium-android-unpacking","last_synced_at":"2025-04-29T18:31:15.540Z","repository":{"id":97921396,"uuid":"235180977","full_name":"corellium/corellium-android-unpacking","owner":"corellium","description":"Android Unpacking Automation using Corellium Devices","archived":false,"fork":false,"pushed_at":"2020-01-20T19:38:50.000Z","size":15235,"stargazers_count":130,"open_issues_count":0,"forks_count":14,"subscribers_count":9,"default_branch":"master","last_synced_at":"2024-10-29T16:22:33.019Z","etag":null,"topics":["android","frida","reverse-engineering","reversing","unpacker","unpacking"],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/corellium.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-01-20T19:25:15.000Z","updated_at":"2024-07-14T15:20:01.000Z","dependencies_parsed_at":null,"dependency_job_id":"8262d8ae-1ac6-448a-8fc9-c23b0963129e","html_url":"https://github.com/corellium/corellium-android-unpacking","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corellium%2Fcorellium-android-unpacking","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corellium%2Fcorellium-android-unpacking/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corellium%2Fcorellium-android-unpacking/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corellium%2Fcorellium-android-unpacking/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/corellium","download_url":"https://codeload.github.com/corellium/corellium-android-unpacking/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251559853,"owners_count":21609088,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","frida","reverse-engineering","reversing","unpacker","unpacking"],"created_at":"2024-07-31T14:00:33.017Z","updated_at":"2025-04-29T18:31:10.531Z","avatar_url":"https://github.com/corellium.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"# Android Unpacking Automation\n\nA bit of automation strung up around an Android 7.1.2 device on Corellium, used to defeating (most) packers on the market. \n\n## Description\nThis method targets `art::DexFile::OpenMemory` method for Android 7.1.12 while utilizing a Corellium device to provide an always-on and always-ready device for unpacking. While this current demo only utilized one device, this can essentially be scaled up transparently to the front end as all the \"tasks\" are handled by `nsqd`.\n\nThe `backend` sets up a vpn tunnel to the Corellium server, which auto-restarts upon failure, and opens up a reverse proxy to the docker network. This is then utilized by the `unpacker-worker` which uses it to communicate transparently with the device.\n\n## Building\n\n### Setup\n - Have a corellium account with a device already created and booted up (7.1.2 eng build)\n - Replace `backend/vpn-profile.ovpn` with the OpenVPN profile from your Corellium device\n - Fill out `.env` file like so;\n\n```\nINSTANCE_ID=7cc6ca2a-6622-479b-aa4b-8394aa9d9475-instance-for-unpacker\nCORELLIUM_URL=testinstance.corellium.com\nCORELLIUM_USERNAME=unpackeruser\nCORELLIUM_PASSWORD=unpackerpassword\n\nGIN_MODE=debug\nSERVE_PORT=3000\nADB_PROXY=5555\n```\n\n### Docker\n\nThen simply use `docker-compose build` followed by `docker-compose up`.\n\n## Usage\n\nHitting the backend api with an apk will result in it queing up a binary to get unpacked;\n`curl 0.0.0.0:3000/unpack/SHA1_OF_APK --data-binary @/path/to/apk`\n\nAfter a minute or two, check back for the asset status;\n`curl 0.0.0.0:3000/unpack/SHA1_OF_APK/status`\n\nThen when assets of interest are found, download them;\n`curl 0.0.0.0:3000/unpack/SHA1_OF_APK/SHA1_OF_ASSET`\n\n## Disclaimer\nThis presentation and code are meant for education and research purposes only. Do as you please with it, but accept any and all responsibility for your actions. The tools were created specifically to assist in malware reversing and analysis - be careful. They have not been hardened for external public consumption, it is likely not a smart idea to expose a service like this to the public internet without thinking long and hard about it.\n\n## License\n```\nCopyright 2020 Tim 'diff' Strazzere \u003ctim@corellium.com\u003e\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n   http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcorellium%2Fcorellium-android-unpacking","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcorellium%2Fcorellium-android-unpacking","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcorellium%2Fcorellium-android-unpacking/lists"}