Breakin 'Em All: Overcoming Pokemon Go's Anti-Cheat and Reverse Engineering
Deconstructs the anti-cheat and runtime integrity mechanisms in Pokemon Go, demonstrating mobile reverse engineering and integrity bypass tradecraft.
Summary
Mobile Anti-Cheat Architecture
Mobile location-based games deploy multi-layered anti-tamper and anti-cheat mechanisms to protect game economies and prevent GPS spoofing and automated botting.
Reverse Engineering Obfuscated Mobile Binaries
Hugo Gonzalez and Caleb Howell analyze native libraries, dynamic code loading routines, and heavily obfuscated integrity verification functions protecting mobile game clients.
Bypassing Runtime Environment Checks
Researchers demonstrate how to circumvent jailbreak and root detection, Frida hooking checks, and Play Integrity attestations by patching native binary routines and intercepting system calls.
Lessons for Mobile Application Protection
Analyzing game anti-cheat ecosystems highlights the continuous cat-and-mouse dynamic between mobile application protectors and reverse engineers.
Related talks
Main Stage·42 min
Laurie Kirk
Laurie Kirk unveils runtime manipulation techniques in native C++ via JNI to alter Android execution flow, defeating emulators and decompilers.
Main Stage·46 min
Xiling Gong · Eugene Rodionov
Vulnerability analysis and exploit primitives targeting mobile GPU drivers to achieve local privilege escalation and Android root.
Blue Team Village·31 min
JunWei Song · KunYu Chen
Introduces Quark-Engine, an open-source Python malware scoring and analysis framework for Android applications.