unity assets bundle extractor assembly-csharp

This app downloaded two resource from a remote server: Then open the app and observe at the proxy Note that you make sure your proxy can sniff the HTTPS Request by trusting Proxy’s Certificate in Android Client. I suspect the app downloaded required modules via HTTP, so I do some configs to force this app goes through a HTTP Proxy (such as ZAP, BurpSuite …) to know what it actually does. I assume that the decompiler is not effective and it does not show the source code completely Dynamic Testing So, where is ExtendModuleActivity? I haven’t seen it in the decompiled code. “Find me if you can!” string that we have seen when runing the app. We easily decompile a dll written in C# by using decompilers such as dnspy, ilspy or dotpeek…Īt line 39, the app loads Component ExtendModuleActivityĪt line 40 and 41, displaying the content of the Component above to screen. After extract the apk file, we can see it at: /assets/bin/Data/Managed/Assembly-CSharp.dll In Unity Framework, the main code is written by C# language and compiled to a dll file. When running the application on an Android Emulator, you will see results like bellow. Notice this file is not the original version, it was modified to fit the article. And in this article, I will describe my work process.

I really doubt this method, so I try to reverse this app to obtain the hidden code.

If you are a mobile application developer, you may be interested in exposing sensitive information from your application because of decompilation a mobile app such as Android app is not too difficult.Ī friend of mine recently developed an Android application using Unity framework, it can hide code by downloading the required modules from a trusted-server at the runtime.

Unity assets bundle extractor assembly-csharp