03-12-2015, 06:43 AM
I am trying to figure out what the password is to use a certificate that is contained in a apk. I managed to rewrite part of their code to open the key store file successfully but cannot manage to find the password needed to load the PKCS certificate. I've dumped every string found in the hprof file and while I was able to find the key store password there, when this list was loaded into my custom brute force software there was no matching password in the list of strings to load the certificate. I also tried to look at char arrays without success. As for looking over the obfuscated code what type of methods should I search for? I already tried "getKey", "Load", "init". Any ideas of other objects to look into?