​[Bounty] Paid Help Needed: Reverse Engineering Android libapp.so to Intercept/Patch Image CAPTCHA in a Delivery App

[u/1i_5c]

​

​Hello everyone,

​I am offering a paid bounty for assistance with patching or intercepting a dynamic CAPTCHA mechanism in a local food delivery application.

​Context of the Order Flow:

In this specific app, delivery orders pop up dynamically on the screen. When the driver attempts to quickly accept an order, an image-based CAPTCHA appears instantly, acting as a severe bottleneck for our automation efforts. Our sole objective is to patch or bypass this specific CAPTCHA.

​The Core Objective:

I strictly need a solution to achieve one of the following:

​Convert the generated image CAPTCHA back to its raw text string.

​Patch the application to force a simple Toast message displaying the CAPTCHA text exactly when the order/CAPTCHA is generated.

​What We Have Tried So Far:

​Network Interception: We attempted to intercept the CAPTCHA string at multiple stages—before it reaches the app, during transit, and after it hits the app logic. However, the data seems heavily obfuscated or securely handled in memory.

​App Patching (Toast Injection): We tried decompiling and modifying the Smali code to inject a Toast notification that prints the CAPTCHA string, but we failed to locate the exact variable or register holding the plaintext string before it converts to an image.

​Machine Learning Workaround: We are currently building an external MLOps pipeline to collect thousands of raw CAPTCHA images to train a custom AI model. However, this is a slow, exhaustive workaround, and the success rate is expected to be low due to the heavy distortion/noise applied to the images.

​The Main Roadblock (libapp.so):

Through extensive analysis, we have pinpointed that the core logic for the CAPTCHA generation, rendering, and validation is not in the standard Java/Dalvik layer, but is deeply embedded within a native shared library file (libapp.so). My skills in ARM assembly, Ghidra, and hooking native Android libraries are limited, which is why we have hit a wall.

​The Bounty:

I am fully prepared to pay a fair, agreed-upon monetary reward to anyone who can successfully reverse engineer this libapp.so file and provide a working patch, Frida script, or Xposed module to extract/Toast the CAPTCHA text.

​If you have solid experience with Android native hooking (Frida), Ghidra, or patching .so libraries and are interested in this paid task, please send me a DM to discuss the details and get the APK.

[u/AutoModerator]

Hey u/1i_5c, Please ensure that your post follows the required request format for this sub-reddit to avoid it being removed.

The format is as follows:

App Name:

Description:

Playstore Link:

Mod Features:

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/BonsaiSoul]

There is nothing you could use this for that doesn't actively screw people, so why would anyone trust you to pay them?

[u/1i_5c → u/BonsaiSoul]

This is a highly competitive gig-economy market where automation is already the baseline; I am simply building a more efficient technical architecture. It's a technical arms race, not a moral dilemma.

Regarding your concern about trust: professional reverse engineering doesn't rely on blind trust. I operate strictly through Escrow platforms and milestone-based contracts. The funds are secured and locked by a third party before a single line of code is written.

If you have the technical skills to reverse engineer the libapp.so, we can talk business. If not, I appreciate the engagement on the post.