-
### Finding Description
The app is vulnerable to the Janus exploit.
Janus ([CVE-2017-13156](https://nvd.nist.gov/vuln/detail/CVE-2017-13156)) exposes a critical flaw in Android's APK validation proc…
-
python app not launched
-
Aptoide does not seem to verify signatures of downloaded packages, nor does it use SSL to download packages, which means the packages themselves could be trivially tampered with, while they are downlo…
-
Hello, kill signature verification (enhanced) not working in unity 3d games.
![99b5f380-3754-4a7e-8b94-ec18564a177b](https://user-images.githubusercontent.com/50717022/236849488-8f108694-0756-4946-…
-
Hi @Lanchon
For first sorry for bad english
Suggestion:
Modify and improve patches for android 6+ (if it is possible) to make them check if `android.permission.FAKE_PACKAGE_SIGNATURE` declared…
Vavun updated
4 years ago
-
Here are three methods of apk download verification that would mitigate against MiTM attacks. It would be great if pia-foss/android could adopt at least one method for users to be able to verify their…
-
```sh
[12:41 edu@xps ar.tvplayer.tv.apk.unpack] > egrep -iRn dexprotector
META-INF/MANIFEST.MF:5:Protected-By: 12.3.19 DexProtector (20211214)
```
-
# Problem
Accrescent's repository metadata format and organization was not designed for cacheability, internationalization, or atomicity. As a result, Accrescent has limited scalability, target aud…
-
### Information
1. **Apktool Version (`apktool -version`)** - 2.7.1-2b8121-SNAPSHOT (also tried 2.7.0)
2. **Operating System (Mac, Linux, Windows)** - Linux
3. **APK From? (Playstore, ROM, Other)**…
-
Looks like Amazon is working hard this year. Again we have Error code 420.
Or just me?