MatrixEditor / pairipcore-vm Public

Notifications You must be signed in to change notification settings
Fork 23
Star 162

Research on the internal workings of Google's Play Integrity Protect Virtual Machine (VM) with tools for both disassembling and decompiling the bytecode.

matrixeditor.github.io/pairipcore-vm/

162 stars 23 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
.github/workflows		.github/workflows
assets		assets
docs		docs
include/gvm		include/gvm
pairipcore		pairipcore
src		src
tools		tools
.gitignore		.gitignore
README.md		README.md
pyproject.toml		pyproject.toml
requirements.docs.txt		requirements.docs.txt
requirements.txt		requirements.txt

Repository files navigation

pairipcore vm

Further research based on pairipcore, focusing on the virtual machine (VM) used to virtualize code in Android apps as a protection mechanism.

Important

Google designed the VM to be custom for every release of an application. The analysis provided here acan be used up to the point where opcodes are analyzed. A workaround is WIP!

Note

A detailed writeup is work-in-progress and will be published to GitHub Pages soon. Decompiler and Disassembler are WIP!

Note

The opcodes seem to change each version release - therefore, the decompiler given here can't be used against newer bytecode files!

Disclaimer

The information presented here is for educational purposes only!

Overview

Moved to GitHub-Pages https://matrixeditor.github.io/pairipcore-vm/.

About

Research on the internal workings of Google's Play Integrity Protect Virtual Machine (VM) with tools for both disassembling and decompiling the bytecode.

matrixeditor.github.io/pairipcore-vm/

Readme