AndroidZipArbitrage
AndroidZipArbitrage copied to clipboard
Fuzion24
Exploit for Android Zip bugs: 8219321, 9695860, and 9950697
The application closes when scanning for vulnarabilities.
$ java -jar ~/ZipArbitrage/bin/AndroidZipArbitrage.jar --9695860 orig.apk patched.apk Using Bug 9695860 to circumvent Android signatures All seems fine, but: $ adb install patched.apk Whoops: didn't find expected signature read_central_directory_entry failed file...
When AndroidManifest is messed with weird things start happening. Dig into this a bit to see what is possible.
I was thinking about adding a command into apktool build like ``` apktool b --addToOrig PATH_TO_ORIG_APK apktooled_dir ``` where it will just build all the modded sources back into the...