Challenge

Replace the image in the dialog

Level: Easy
Hint: The image is located in the assets folder.

Note: You don’t need to touch the lib to solve it, but feel free to use any technique you like.

Preview of dpt-shell Unpacker (No Root Required)

Just sharing a quick preview of a tool I’m working on, a dpt-shell unpacker that doesn’t require root access.
At the moment, it only supports dpt-shell v2. I’ll be adding support for v1 soon, so stay tuned!

@NullRE_Channel

Hook SharedPreferences with Pinehook

Class<?> SharedPreferences = Class.forName("android.app.SharedPreferencesImpl");
Method getBoolean = SharedPreferences.getDeclaredMethod("getBoolean", String.class, boolean.class);
Pine.hook(getBoolean, new MethodHook() {
    @Override
    public void afterCall(Pine.CallFrame callFrame) throws Throwable {
        super.afterCall(callFrame);
        String key = (String) callFrame.args[0];
        if(key.equals("isPremium")){
            callFrame.setResult(true);
        }
    }
});

ref : Frida Script

@NullRE_Channel
#hook #pine #tutorial

Hi guys, the dpt-shell unpacker is now ready for testing! You can try it out via my Telegram bot (@getDex_bot). Just send your app there.

Note:
This is for testing purposes only. Please use your own app that has been protected with dpt-shell.

The bot will be online for 1 hour only. After that, I will stop it.

How to repack:
1. Change your Application class name and AppComponentFactory in AndroidManifest.xml back to the original values.

2. How to find the original values? Check your assets folder:
- app_name → Application class name
- app_acf → AppComponentFactory

[Optional] Remove unnecessary files:
- assets/app_name
- assets/app_acf
- assets/OoooooOooo
- assets/vwwwwwvwww
- The last dex file (junk code) — be sure to inspect it before deleting


@NullRE_Channel

Tutorial Remove Pairip

Note:
This app already has pairip removed from the dex, but there are still some native libs that contain pairip, which can cause the app to crash. So here, we want to replace those libs with ones that don’t contain pairip.

Before trying this, I recommend downloading an older version of the app and checking its native libs. Sometimes, older versions still use the same libs without pairip and you can replace the current ones with those. You can also check other apps that use the same libs without pairip.

If you can’t find any, you can follow this video to identify which lib is being used, and build a simple app that includes the same dependency to get a clean version of the lib without pairip.

Fortunately, in most cases, the lib that contains pairip is not from the app developer’s own code, but from a third-party dependency, so you can rebuild the lib yourself without pairip.

Tools used in this video:
1. Mt Manager
2. AndroidIDE
3. LogFox


@NullRE_Channel

#tutorial #pairip

🚀 DPT Shell Unpacker is Now Back Online!

Need to unpack apps protected with DPT Shell?
@getDex_bot is ready to serve you. Fast, reliable, and effortless.

Just send your app, no commands needed. The bot will handle everything automatically, from unpacking to delivering the result.

✨ If the unpacked dex (after compression) is under 10MB, the service is completely free.

For files larger than 10MB, a small processing fee applies. Don’t worry — the bot will automatically notify you about payment details once the unpacking is complete.

Ideal for reverse engineers, malware analysts, security researchers, and curious minds alike who want quick, accurate unpacking.

Give it a try with your own apps and compare the unpacked dex with the original to see the difference.

Let @getDex_bot take care of the heavy lifting, so you can focus on your analysis!


@NullRE_Channel

New Update ✨

@getDex_bot now supports unpacking dex files from applications protected with Arm加固. This feature is available for free and without limitations.

Bug Fixes & Improvements:
In the previous version, unpacking dpt-shell could fail if the required file had been renamed using a modified version of dpt-shell. We've added a fallback mechanism to automatically scan the app and locate the correct file, improving compatibility with modified versions.

Currently Supported Protections:
- dpt-shell (standard & some modified versions)
- Arm加固
- (More coming soon...)

Note:
Unpacking for Arm加固 is free and has no limitations.
Unpacking for dpt-shell is free if the dex size after compression is under 10MB.

Try it now, and if you encounter any issues or have feedback, feel free to contact @NullRE.

@getDex_bot
@NullRE_Channel

New Update ✨

@getDex_bot now supports unpacking dex files from applications protected with ApkWall and ApkSecurity, ApkEncryptor.

Supported Protections:
- Dpt-shell
- Arm加固
- ApkWall Protection
- Apk Security Protection
- Apk Encryptor
- (More coming soon...)

You can try it now. For bug reports or feedback, feel free to contact @NullRE.

@NullRE_Channel

New Update ✨

@getDex_bot now supports unpacking/dumping dex files from applications protected with DexProtector App.

Currently, our bot can dump dex files from the following protections:
- DPT-Shell
- Arm加固
- ApkWall Protection
- Apk Security Protection
- Apk Encryptor
- DexProtector App
- (More coming soon...)

Note:
I've just refactored the code, and I haven't had much time to test everything thoroughly.
If you encounter any bugs or have feedback, feel free to contact @NullRE.

@NullRE_Channel

New Update ✨

@getDex_bot now supports unpacking / dumping dex files from applications protected with Crazy Tools and ApkProtector.

Currently, our bot can dump dex files from the following protections:
- DPT-Shell
- Arm加固
- ApkWall Protection
- Apk Security Protection
- Apk Encryptor
- DexProtector App
- Crazy Tools
- ApkProtector
- (More coming soon...)

@NullRE_Channel

New Update ✨

@getDex_bot now supports unpacking/dumping dex files from applications protected with Modder Hub and Guardrail.

Bug Fixes & Improvements:
Fixed an issue with our custom protection scanner that could fail to identify the protection, even though it was already supported.

Currently, our bot can dump DEX files from the following protections:
- DPT-Shell
- Arm加固
- ApkWall Protection
- Apk Security Protection
- Apk Encryptor
- DexProtector App
- Crazy Tools
- ApkProtector
- Modder Hub
- Guardrail
- (More coming soon...)

@NullRE_Channel

Tutorial: how to use mtcr-apply

mtcr-apply is a simple script to apply patches to your APK.
It uses .mtcr files generated by MT Manager.
The idea behind mtcr-apply is inspired by git-apply.

Usage:

java -jar mtcr-apply.jar -i input.apk -p patch.mtcr

To reverse:

Just add the -r flag

@NullRE_Channel

Decrypt string

@NullRE_Channel

Tutorial Remove Pairip

Downlaod Pairip.jar

@NullRE_Channel

Pairip Patcher v1.2.0 (Supports the latest pairip)

Notes:
- Root required. For non-rooted users, please use VPhonegaga.
- This tool only removes pairip from dex. If there is still pairip in the libs, you need to replace or patch the lib manually. See: replace lib tutorial.
- If you know how to patch libs and want to contribute to this project, feel free to dm @NullRE

Requirements:
Java 17 or later

Usage:
java -jar Pairip.jar -i example.apks

For translation:
java -jar Pairip.jar -i example_merged.apk -t pairip.json

Video tutorial:
- Tutorial remove pairip [root]

Known Issue
LicenseClientV3 is not fully removed. This issue will be fixed in the next update.

If you encounter the following error:

Failed resolution of:
Lcom/pairip/licensecheck3/LicenseClientV3;

You can fix it using the following regex:

Search:

invoke-static \{([vp]\d+)\}, Lcom\/pairip\/licensecheck3\/LicenseClientV3;->onActivityCreate\(Landroid\/app\/Activity;\)V

Replace:
nop

@NullRE_Channel

Pairip Patcher v1.3.6

Bug fixes:
- LicenseClientV3 (#1)
- OutOfMemory issue when removing pairip from very large apk files (#2)
- String being used before it was restored (#3)
- Fixed the dex filter to prevent copying the wrong dex (#4)

Notes:

- Root required. For non-rooted users, please use VPhonegaga.
- This tool only removes pairip from dex. If there is still pairip in the libs, you need to replace or patch the lib manually. See: replace lib tutorial.

Requirements:
Java 17 or later

Usage:
java -jar Pairip.jar -i example.apks

For translation:
java -jar Pairip.jar -i example_merged.apk -t pairip.json

Video tutorial:
- Tutorial remove pairip [root]

@NullRE_Channel

Pairip Patcher v1.3.7

Bug fixes:
- Fixed app crashes and dex rebuild failures caused by using an incorrect dex version during the build process (#5).

Notes:

- Root required. For non-rooted users, please use VPhonegaga.
- This tool only removes pairip from dex. If there is still pairip in the libs, you need to replace or patch the lib manually. See: replace lib tutorial.

Requirements:
Java 17 or later

Usage:
java -jar Pairip.jar -i example.apks

For translation:
java -jar Pairip.jar -i example_merged.apk -t pairip.json

Video tutorial:
- Tutorial remove pairip [root]

@NullRE_Channel

Pairip Patcher v1.3.8

Bug fixes:
- Fixed an issue in class filtering where it never matched the expected value (#6).

Notes:

- Root required. For non-rooted users, please use VPhonegaga.
- This tool only removes pairip from dex. If there is still pairip in the libs, you need to replace or patch the lib manually. See: replace lib tutorial.

Requirements:
Java 17 or later

Usage:
java -jar Pairip.jar -i example.apks

For translation:
java -jar Pairip.jar -i example_merged.apk -t pairip.json

Video tutorial:
- Tutorial remove pairip [root]

@NullRE_Channel

Pairip Patcher v1.3.9

Bug fixes:
- Fixed a potential ExceptionInInitializerError caused by static class initialization when loading classes via Class.forName (#7).

Notes:

- Root required. For non-rooted users, please use VPhonegaga.
- This tool only removes pairip from dex. If there is still pairip in the libs, you need to replace or patch the lib manually. See: replace lib tutorial.

Requirements:
Java 17 or later

Usage:
java -jar Pairip.jar -i example.apks

For translation:
java -jar Pairip.jar -i example_merged.apk -t pairip.json

Video tutorial:
- Tutorial remove pairip [root]

@NullRE_Channel