APK Decompilation & String Recon
mobile · easy · +30 XP
Target
GET /api/lab/apk-decompile-101/smali (jadx-decompiled smali, ~80 lines)
POST /api/lab/apk-decompile-101/auth body {api_key} (flag iff correct API key)
Goal: the smali dump contains a constant string in the format API_KEY = hc_apk_*. Find it, post it to /auth, and you receive the flag.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/apk-decompile-101/
// reuse on the cli
// submit flag
// no solves yet
// start of mobile
next
AndroidManifest Audit
1 of 12 · mobile