Can an attacker attach a debugger to my app after installing it to the market, or does the app have to be marked as debuggable first? How secure is this? Are there ways to get around it?
A debugger is a software tool that can help the software development process by identifying coding errors at various stages of the operating system or application development. Some debuggers will analyze a test run to see what lines of code were not executed.
A debugger would have to install different tools on the server, run the application in debug mode, and remotely connect to it using some advanced IDE. This process will not only make the application nearly unresponsive for users, but also wouldn't be possible as you don't have access to the host server.
Marked debuggable or not, if a hacker has your code on his/her machine he/she will be able to use a variety of tools to attach to your process, examine the code, the memory, execute arbitrarily etc. This goes for any app and any platform. Your best hope is to follow security best practices and obfuscate to make it hard for someone to crack your code.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With