Decompile React Native Application Android

Diego Condori
3 min readNov 7, 2023

--

In this story, solved the next challengue of Hack The Box:

Now let’s begin, download the files:

And decompress, we have the next apk:

Now the next question is: ¿How decompile the apk?

The answer is the next tool: https://www.decompiler.com/

So upload the apk, and the decompile is:

Now download the files, and decompress in directory work:

In this point, search the next file:

If it’s not here, we will think the app is not created with React Native.(But in this case it is here).

It seems illegible if we see it at first glance:

But, if you create the file index.html in the same directory where located index.android.bundle, and add the line:

<script src="./index.android.bundle"></script>

Now the index.html execute in the browser:

And go to the DevTools and sources:

And there is the readable code, pass to the visual code:

Read and scroll the code…..

Find…

The key debug is base64 string, so decoded the string in the cyberchef of another tool for decode base64:

Sign up to discover human stories that deepen your understanding of the world.

Free

Distraction-free reading. No ads.

Organize your knowledge with lists and highlights.

Tell your story. Find your audience.

Membership

Read member-only stories

Support writers you read most

Earn money for your writing

Listen to audio narrations

Read offline with the Medium app

--

--

Diego Condori
Diego Condori

Written by Diego Condori

eJPT | eCPPT | Pentester Red Team | Computer Science Student | Programmer

No responses yet

What are your thoughts?