https://overkazaf.github.io/blogs/tags/android/Recent content in Android on +5 Security ResearchHugozh-cnThu, 04 Jun 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/fairplay-drm-frida-reversing/Sun, 10 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/fairplay-drm-frida-reversing/通过 Frida 动态插桩 + IDA Pro 静态分析，逐步还原 Apple Music for Android 的 FairPlay DRM 解密调用链：从 Java 层 FootHillDecryptionKey 到 Native 层 SVFootHillSessionCtrl 的 5 个关键函数，最终定位白盒 AES 解密入口 NfcRKVnxuKZy04KWbdFu*** 并实现加密 ALAC 样本的流式 dumphttps://overkazaf.github.io/blogs/posts/widevine-l3-keybox-mass-production/Wed, 29 Apr 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/widevine-l3-keybox-mass-production/通过差分故障攻击(DFA)提取Widevine L3白盒AES密钥，实现keybox离线量产的完整逆向工程记录https://overkazaf.github.io/blogs/posts/douyin-sixgod-metasec-unidbg-reverse-engineering/Sun, 29 Mar 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/douyin-sixgod-metasec-unidbg-reverse-engineering/通过 unidbg 仿真抖音 libmetasec_ml.so，突破 OLLVM+VM+JIT 三层防护，完整提取六神签名（X-Gorgon/X-Khronos/X-Argus/X-Ladon/X-Helios/X-Medusa）的逆向工程记录