From b57b2f497554ae013eced6ef7335411f6dc727ff Mon Sep 17 00:00:00 2001 From: itachi_cracker <109427602+itachi-cracker@users.noreply.github.com> Date: Wed, 1 May 2024 23:06:56 -0300 Subject: [PATCH] Added how to merge splited APKs --- mobile-pentesting/android-app-pentesting/README.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/mobile-pentesting/android-app-pentesting/README.md b/mobile-pentesting/android-app-pentesting/README.md index 5c7a19f51..f3460f021 100644 --- a/mobile-pentesting/android-app-pentesting/README.md +++ b/mobile-pentesting/android-app-pentesting/README.md @@ -62,7 +62,16 @@ com.android.insecurebankv2 adb shell pm path com.android.insecurebankv2 package:/data/app/com.android.insecurebankv2-Jnf8pNgwy3QA_U5f-n_4jQ==/base.apk -adb pull /data/app/com.android.insecurebankv2- Jnf8pNgwy3QA_U5f-n_4jQ==/base.apk +adb pull /data/app/com.android.insecurebankv2-Jnf8pNgwy3QA_U5f-n_4jQ==/base.apk +``` +* Merge all splits and base apks with [APKEditor](https://github.com/REAndroid/APKEditor): +```bash +mkdir splits +adb shell pm path com.android.insecurebankv2 | cut -d ':' -f 1 | xargs -n1 -i adb pull {} splits +java -jar ../APKEditor.jar m -i splits/ -o merged.apk + +# after merging, you will need to align and sign the apk, personally, I like to use the uberapksigner +java -jar uber-apk-signer.jar -a merged.apk --allowResign -o merged_signed ``` ## Static Analysis