Instrumenting System Applications on Android Images

Explore techniques for instrumenting system applications on Android stock images in this 20-minute conference talk from Recon 2022. Learn how to perform dynamic analysis on high-privilege background applications installed by vendors and telecom operators, which users typically cannot uninstall or disable. Follow the speaker's journey through various approaches, their limitations, and ultimate success in instrumenting Google Play Protect Services. Gain insights into Frida-based instrumentation methods that minimize changes to stock images, opening doors for further research on system applications. Benefit from the speaker's experience in overcoming challenges specific to Android versions and application types, equipping you with valuable techniques for different contexts in mobile security analysis.