Hermes bytecode

React bundle code will be in:

<appname>.app/main.jsbundle assets/index.android.bundle

• Contents are minified JavaScript bundle

• If the bundle is not encrypted , beautify the JavaScript and review.

• Grep for URL paths

• Grep for methods like GET, POST, PUT , DELETE etc to find content

• Lately react bytecode is in hermes bytecode:

https://reactnative.dev/blog/2022/07/08/hermes-as-the-default

• Run file on the bundle file and if it says Hermes JavaScript Bytecode, then it's in this format.

• Can be dissassembled/decompiled with this tool:

https://github.com/P1sec/hermes-dec/