REA team@REA team
Inspect the Aegis Android APK with REA, recover its six-digit login-code calculation and try a reconstruction with an adjustable clock.
Website · by REA team
How an authenticator generates a login code
Follows the six-digit code calculation of the open-source Aegis authenticator through its released Android APK, and uses a demo clock to show why the code changes every 30 seconds.
About this case
Follows the six-digit code calculation of the open-source Aegis authenticator through its released Android APK, and uses a demo clock to show why the code changes every 30 seconds.
Why it is listed: Official case study on an open-source (GPL) app in an authorized lab setting; educational.
Setup
See the original source for installation instructions.
Original text / README
Inspect the Aegis Android APK with REA, recover its six-digit login-code calculation and try a reconstruction with an adjustable clock.
Similar projects
NullLabTests@NullLabTests
A static analysis write-up of Ubuntu's netcat-openbsd binary using REA with Ghidra, with the evidence behind each finding.
OpenBSD netcat, analysed with REA and Ghidra
Stars 3
jinshi666888@jinshi666888
A hands-on teaching playbook using a minimal Electron target: extract evidence with file and line references, probe the MCP server and recreate the feature.
rea-playbook: from evidence to file:line to recreation
Stars 1
jkf87@jkf87
Follow-along exercises from a Korean video: build your own small Electron app and C program, then analyse them with REA, Ghidra and Claude Code.
Hands-on: analysing your own apps with REA, Ghidra and Claude Code
Stars 1