Info Obfuscated methods


Obfuscation refers to methods to obscure code and make it hard to understand. Compiled Java classes can be decompiled if there is no obfuscation during compilation step.

Adversaries can steal code and repurpose it and sell it in a new application or create a malicious fake application based on the initial one.

Code obfuscation only slows the attacker from reverse engineering but does not make it impossible.


Design the application to add the following protections and slow reverse engineering of the application:

  • Obfuscate Java source code with tools like Proguard or Dexguard
  • buildTypes {
            release {
                minifyEnabled true
                proguardFiles getDefaultProguardFile('proguard-android.txt'),
  • Verification application signing certificate during runtime by checking context.getPackageManager().signature
  • Check application installer to ensure it matches the Android Market by calling context.getPackageManager().getInstallerPackageName
  • Check running environment at runtime
  • private static String getSystemProperty(String name) throws Exception {
        Class systemPropertyClazz = Class.forName("android.os.SystemProperties");
        return (String) systemPropertyClazz.getMethod("get", new Class[] { String.class }).invoke(systemPropertyClazz, new Object[] { name });
    public static boolean checkEmulator() {
        try {
            boolean goldfish = getSystemProperty("ro.hardware").contains("goldfish");
            boolean qemu = getSystemProperty("ro.kernel.qemu").length() > 0;
            boolean sdk = getSystemProperty("ro.product.model").equals("sdk");
            if (qemu || goldfish || sdk) {
                return true;
        } catch (Exception e) {
        return false;
  • Check debug flag at runtime
  • context.getApplicationInfo().applicationInfo.flags & ApplicationInfo.FLAG_DEBUGGABLE;

Technical details
PackageObfuscated False
javax.inject False False False False
com.BV.LinearGradient False False True
net.jcip.annotations False
okio False
com.azendoo.reactnativesnackbar False
net.minidev.json False
me.listenzz.modal False False
io.opencensus.tags False False False
androidx.versionedparcelable False False
net.minidev.asm False
bolts False
com.cocosw.bottomsheet False True False False False
io.opencensus.trace False False
androidx.core.internal False True
com.iamport False False False
com.nimbusds.jwt False False False
android.arch.core False False
org.webkit.android_jsc False
javax.annotation False False
com.oblador.vectoricons False False False False
io.grpc False
okhttp3 False
io.opencensus.stats False
com.squareup.okhttp False False
com.imagepicker False False False
com.nimbusds.jose False
io.opencensus.common False
io.opencensus.internal False
com.clipsub.rnbottomsheet False
android.arch.lifecycle False False
org.objectweb.asm False
com.facebook False
io.invertase.firebase False
co.apptailor.googlesignin False False