简体   繁体   English

是否可以通过对apk进行反向工程来破解应用程序?

[英]Is it possible to hack an app by reverse engineering the apk?

I have learned from this post Reverse engineering from an APK file to a project that it is possible to get the java files from an apk. 我从这篇文章中学到了从APK文件进行反向工程到项目的过程 ,可以从apk获取Java文件。 Does this mean a hacker can see my code? 这是否意味着黑客可以看到我的代码?

Yes, but if seeing your code makes your app less secure, then your app's security model was flawed from the beginning. 是的,但是如果看到您的代码会使您的应用程序不那么安全,那么您的应用程序的安全模型从一开始就是有缺陷的。 Any code or data that users shouldn't have access to should be run or stored only on your server, not on the users' devices. 用户不应访问的任何代码或数据应仅在服务器上运行,或仅在服务器上运行,而不存储在用户的设备上。

Also, beware of snake oil obfuscators that claim to make it impossible to reverse-engineer your code. 另外,要提防声称无法对代码进行反向工程的蛇油混淆器。 None of these work; 这些都不起作用; anything your device can execute can be reverse-engineered with enough effort (except maybe SGX, but that doesn't exist on phones). 您的设备可以执行的所有操作都可以进行充分的逆向工程(也许SGX除外,但这在手机上不存在)。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM