can it reverse engineer an os

[sumanth37z]

i was just wondering if it could reverse engineer an android os that is integrated in Smart TV.

[amitpadhan525]

Yes, it's possible! You can start by checking whether ADB is enabled, then inspect the system using ADB commands. If you can obtain the firmware, tools like Binwalk and JADX can help analyze its contents. The exact process depends on the TV model and its security protections.

[Dragolone]

Yes, on your own TV, as long as you can get ADB access or the firmware files. REA doesn't treat "the OS" as one target; you split it into pieces it can analyse.

Over ADB (easiest place to start). Turn on developer options / network debugging on the TV and connect yourself with adb connect <tv-ip>:5555. REA works with devices that are already connected, but it doesn't run adb connect for you. Then:

rea list-adb-devices
rea inspect-adb-device <serial>
rea list-adb-packages <serial> --scope system   # launcher, settings, vendor services
rea pull-adb-package <serial> <package> --output-directory ./acq
rea inspect-android-package ./acq/<package>/base.apk

Decompiling classes and methods needs headless JADX plus a full JDK (see docs/android-analysis.md). rea read-adb-logcat <serial> --count 200 and rea list-adb-processes <serial> are useful for seeing what's actually running.

From a firmware/update image. If you can get the update package, unpack it first and feed individual images to inspect_firmware_regions / extract_firmware. These use Binwalk/Unblob, are verified on Linux x64, and region inspection takes inputs up to 128 MiB (see docs/firmware-analysis.md). Native ELF binaries that come out of it can be opened with open_binary (Ghidra).

What it won't do: get you past a locked bootloader or an encrypted/signed update package. You need the files in hand first.

I've contributed a few fixes to REA, so if one of these steps errors out on your TV, post the output here and I'll take a look.

[Dragolone]

Hope that helps:)

[sumanth37z]

thanks! im gonna try it out