search

sensepost / objection

📱 objection - runtime mobile exploration
GNU General Public License v3.0
7.41k stars 850 forks source link

Option to avoid signing #624

Closed mesidex closed 1 year ago

mesidex commented 1 year ago

Is your feature request related to a problem? Please describe. When running signed APK files on a rooted device, it is not possible to log in through Google. Many of the methods I've tried to solve this issue with ended up breaking the installation of the modified APK file. My target device is on Android 13

Describe the solution you'd like I was wondering if it would be possible to, for example, add an argument like --skip-signing to prevent objection from signing the final APK.

Describe alternatives you've considered I've tried things like copying the META-INF folder from the original APK file to the modified one, as well as disabling any kind of SSL pinning via TrustMeAlready.

Additional context If there are any known solutions already, please let me know :)

leonjza commented 1 year ago

This is not an option that exists now, but is really easy to add. Essentially it will be a new flag to this command here, flowing through to here to skip that step.