search

sensepost / kwetza

Python script to inject existing Android applications with a Meterpreter payload.
GNU General Public License v2.0
629 stars 238 forks source link

use apksigner instead of jarsigner #16

Closed anantshri closed 7 years ago

anantshri commented 7 years ago

apksigner is recommended tool now. also note the change in order of zipalign and signing. https://developer.android.com/studio/command-line/apksigner.html

brompwnie commented 7 years ago

Good day, Thank you for your comment. Could you perhaps provide an example where apksigner is more beneficial when creating malicious Android applications?

anantshri commented 7 years ago

i don't see a major difference in current state. but apksigner is what google has started recommending for dev's so no idea if future might have specific features in it only. so you can may be treat it as a reminder that at one point in time you might have to move away from jarsigner and use apksigner.

brompwnie commented 7 years ago

Thanks for this. I've marked this as a feature enhancement.