search

ClaudiuGeorgiu / Obfuscapk

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques
MIT License
1.09k stars 285 forks source link

sign bundle .aab with custom key #168

Closed khanbaba closed 9 months ago

khanbaba commented 1 year ago

Description

The aabSigner does not use my custom keystore file to sign the .aab bundle, instead it signs with a predefined key file.

Steps to reproduce

  1. resign an aab app
  2. try to install it on previous version of that app or uploading it as a new release to google play console
  3. the keys are different and so you can not update the app.

Versions

Additional information

command used: python3 -m obfuscapk.cli -p -i -w ./myapp -d /new-app.aab -o RandomManifest -o Goto -o Nop -o ArithmeticBranch -o Rebuild -o NewAlignment -o NewSignature --keystore-file ./keys/upload.jks --keystore-password xxxxxxxx --key-alias xxx --key-password xxxxxx /app.aab