Giovanni Rocca

January 28, 2019

Cracking the uncrackables – Reverse engineering – Supercell – part 7

By GiovanniRocca

January 28, 2019

8 Min read

28January

From 0 knowledge to 0.1 knowledge and a lucky win on the new protections shipped on Brawl Stars. Hello folks!!!! Welcome to the, damn…, 7th chapter of this awesome journey. The subtitle already gives a hint about the topic, whose in the Supercell reversing / gaming scene may know that: In the late 2018 Supercell released the new game Brawl Stars, protected with a new unknown compiler from...

January 15, 2019

Debugging Android and iOS like a real G’s with Dwarf GUI

By GiovanniRocca

January 15, 2019

6 Min read

15January

Hello folks and welcome to a small introduction of my new debugger, dwarf. Background and development purpose After about 2 years of researches on mobile cracking and various challenges won, I’ve packed together my experiences with some of the linux eco-system knowledge I collected together with my 8 years of android and backend development. The result is a framework, which I like to call a...

September 20, 2018

Reverse engineering – Supercell – part 6

By GiovanniRocca

September 20, 2018

16 Min read

20September

Hello there!!!!! long time passed since the part 5.. lot of days.. months… but now, I’m back here writing what, until now, is the best part of all the journey – one of the, probably the most, hardest reverse engineering i did – even more fun then reverse engineering the full Arena Of Valor protocol and encryption. In the past write-ups about the Supercell cat mouse, the...

June 30, 2018

How i turn frick into a real frida based debugger

By GiovanniRocca

June 30, 2018

6 Min read

30June

I’m finally proud to write this blog post after some weeks of study and test about how i’ve created my first debugger, built on top of Frida. As usual, let’s spend a couple of word to let the folks understand what was the goal. People following me through twitter or github already know that I recently came out with a new tool called frick, which is a Frida cli that sleep the...

June 20, 2018

Giving yourself a window to debug a shared library before DT_INIT – With Frida, on Android

By GiovanniRocca

June 20, 2018

3 Min read

20June

Hello folks!!! Today I’m gonna share an interesting approach i’ve found to give my self a space to debug before initializations. Let’s spend 2 words about the problem and the goal: Certain compilers and obfuscators take advantages of the init and init_array, which is a pointer and an array of pointers, which point to functions, which are executed at some point during the loading...

March 1, 2018

Debug on a static context with uDdbg – Unicorn DOPE Debugger

By GiovanniRocca

March 1, 2018

6 Min read

01March

Hello guys!! Today i’m writing down a couple of notes about a project I did started 1 month ago together with @rEDSAMK, Unicorn DOPE Debugger (GitHub). First off, I’m gonna spend a couple of line about the purpose and the goal, mainly, why it has been created. As I said in the last 5 minutes of my keynote at Disobey, with this tool, my goal is to provide a runtime environment for the...

January 15, 2018

A journey to Finland, Reverse Engineering on Android – Supercell Pt 5

By GiovanniRocca

January 15, 2018

11 Min read

15January

Hello once again everyone and welcome to the 5th chapter of my blog post chain about reverse engineering and Supercell. Lot of news and cool stuffs happened since my last post and… I’m getting excited just by thinking the word to use to write this blog post. During the last week I got invited from Supercell, in Finland, to speak at Disobey about all of the things posted in the blog...

November 11, 2017

Sensitive data manipulation and tracing on Android – Privacy – SpotifApp

By GiovanniRocca

November 11, 2017

4 Min read

11November

Users’ privacy is a hot topic nowadays, with billions of applications available with an easy tap – The same tap we used to quickly give on those “I agree” checkboxes (which sometimes are totally missing – which is so bad), without actually reading a line of what we are about to “give an ok”, but it’s fine. We all know that almost 99% of the...

October 28, 2017

Reverse Engineering – Supercell – part 4

By GiovanniRocca

October 28, 2017

6 Min read

28October

Hello everybody and welcome to the part 4 of my blog post chain about Supercell games reverse engineering! (I start thinking that we should find something new for the intro… My vocabulary is a bit limited). Almost 20 days after my last post, I’m coming with some great news, personal ones and of course, about some new found we did. Let me start with a big thanks and welcome to @Fil...

October 13, 2017

Reverse Engineering – Supercell – October update, part 3

By GiovanniRocca

October 13, 2017

10 Min read

13October

Hello everybody and welcome to the third chapter of my Supercell reverse engineering posts chain. As said in the second post of the chain, everything has been so quite till the beginning of october, where a missive update has hit Clash Royale, Clash of Clans and Boom Beach. New content has been introduced for almost all of the games and also, I’m happy to see some real security actions that...