Setting up an android environment for dynamic analysis using Genymotion and BurpSuite

Step 0 - Requirements

• Download and install Genymotion
• Download and install Burpsuite
• Install Frida

Step 1 - Installing BurpSuite cacert into Android

Export BurpSuite CA certificate

Converting cacert file

openssl x509 -inform DER -in cacert.der -out cacert.pem

openssl x509 -inform PEM -subject_hash_old -in cacert.pem |head -1

mv cacert.pem <hash>.0

In a previously installed genymotion create a new android virtual device avd

Now its needed to transfer your burp certificate in an android-readable format to your avd

/opt/genymobile/genymotion/tools/adb shell mount -o rw,remount /system

/opt/genymobile/genymotion/tools/adb push 9a5ba575.0 /system/etc/security/cacerts/9a5ba575.0

/opt/genymobile/genymotion/tools/adb shell chmod 644 /system/etc/security/cacerts/9a5ba575.0

Now your certificate must be installed on your device, you can check it on the System Trusted credentials

Step 2 - Setup BurpSuite proxy on Android

Now you can proxy your android device traffic.

Step 3 - Using Frida

genymotion uses x86 arch, so get the latest frida-server-(VERSION)-android-x86.xz

/opt/genymotion/tools/adb push tools/frida/x86/frida-server /data/local/tmp/frida-server

/opt/genymotion/tools/adb shell chmod 777 /data/local/tmp/frida-server

/opt/genymotion/tools/adb shell /data/local/tmp/frida-server &

Check if everything its running properly listing the PIDs in your avd

frida-ps -U