Android Tutorial Simple Smali Hacking

Ted2 · June 17, 2016

Heyyyy

Pretty cool this android topic, I've been hacking android games pretty long now.

Today I'll teach you how to start with smali hacking.

What do you need?

1. the .apk

2. Tools to decompile & recompile the .apk (I use apkstudio but there are other tools too)

3. A editor which can read & edit .smali files (Notepad++, sublime text etc)

4. Pc to edit the smali files, it's possible to do it with phone but you can't search in folders then & smali does have soooo much files.

4. Phone to test it out.

What game will I use for this tutorial?

As I said it's a 'simple' tutorial. I am gonne write down a tutorial for the game "Moto Race" & I'll link my video tutorial of the game "Pou"

I do assume you know how to decompile & recompile a apk, if you don't know how: Google is your bestfriend.

Pou Hack Tutorial:

Moto Race Tutorial

App download link: https://play.google.com/store/apps/details?id=com.gw.moto.racing.stunt

Direct download link: https://drive.google.com/file/d/0B_qzxquukQ6RZG1SeE84QVQzZ0U/view

Step 1: Always open a app to see what possibily can be hacked, if the game is connected with a server it's most of the time much harder.

Step 2: Once you see something what can be hacked, go find it in the smali files.

Example: See the price? We can try hacking this.

Step 3: Let's find this amount in the decompiled smali files by 'searching in files' (locate to your decompiled .apk).

REMEMBER: game value's are decimal, smali value's is Hexdecimal!

Step 4: You got a hit! The first hit is useless, it give you a line which is not important here. Let's look at the second one.

Step 5: We found or function, this function is the price of the bike. Let's change it to "0" in Hexdecimal is this: 0x0. You can do this on every bike in the smali. So you have any bike for free. It will look like this:

Step 6: Save the file, recompile it to .apk, delete the original app from playstore, install the recompiled apk, test it & if it works: ENJOY & GOODJOB!

NOTE: This doesn't work for any app of course, much better and famous apps are much better protected.

Hope it helped!

Goodluck

Credit: ME