Android APK reverse engineering in 7 small steps

1
2
3
4

$ sudo apt install adb apktool openjdk-11-jdk-headless zipalign apksigner
# replace apktool with new version from https://github.com/iBotPeaches/Apktool/releases
$ sudo mv /usr/share/apktool/apktool.jar /usr/share/apktool/apktool.jar.original
$ sudo mv ~/Downloads/apktool_2.7.0.jar /usr/share/apktool/apktool.jar

1
2
3
4
5
6

# start by finding the name of the app
$ adb shell pm list packages | grep <APP_NAME>
# find path of the app
$ adb shell pm path <APP>
# and pull the APK file
$ adb pull <PATH> .

1

$ apktool d <APP>.apk -o output/

1
2

$ apktool b output/ --use-aapt2 -o patched.apk
$ zipalign 4 patched.apk patched2.apk

1
2

$ keytool -genkey -v -keystore release.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000
$ apksigner sign --ks release.keystore patched2.apk

1

$ adb install patched2.apk

1

$ adb logcat -c