search

sensepost / objection

📱 objection - runtime mobile exploration
GNU General Public License v3.0
7.17k stars 825 forks source link

[bug] Patched APK is not installable #578

Open dannyyy opened 1 year ago

dannyyy commented 1 year ago

Describe the bug I tried to patch the apk of the Roborock app. I tried different versions of the app. All of them are not installable on Android 13 (Emulator Pixel 5 device). After trying to install, this error appears app not installed as package appears to be invalid

In the most recent version, I get the following output while patching. Older version didn't have this:

Rebuilding the APK may have failed. Read the following output to determine if apktool actually had an error: 

W: /var/folders/7j/wknp27k94mvc2t7btv0nc0_00000gn/T/tmpkn0veux3.apktemp/AndroidManifest.xml:18: Tag <action> attribute name has invalid character '*'.
W: /var/folders/7j/wknp27k94mvc2t7btv0nc0_00000gn/T/tmpkn0veux3.apktemp/AndroidManifest.xml:18: Tag <action> attribute name has invalid character ''.
W: /var/folders/7j/wknp27k94mvc2t7btv0nc0_00000gn/T/tmpkn0veux3.apktemp/AndroidManifest.xml:18: Tag <action> attribute name has invalid character ''.

To Reproduce Steps to reproduce the behavior:

  1. Download the Roborock 4.0.13 apk (arm64-v8a)
  2. Run objection patchapk -s Roborock_4.0.13.apk
  3. Upload new apk into emulator
  4. Try to install the app

Expected behavior At least the installation should work. Furthermore I expect to have a disabled SSL certificate pinning.

Evidence / Logs / Screenshots If any helpful I can post some screenshots

Environment (please complete the following information):

Application APK is too large. But can be downloaded here: https://apkcombo.com/roborock/com.roborock.smart/download/apk

ax commented 1 year ago

Give a try to https://github.com/ax/apk.sh