apk-modding-workflow

Files (23)

• SKILL.md
• README.md · references/
• apks-bundle-detection.md · references/
• carrom-pool-split-apk-case-study.md · references/
• device-fingerprint-spoofing.md · references/
• dex-string-scanning-for-mod-targets.md · references/
• flutter-apk-rebuild-failures.md · references/
• flutter-app-early-detection.md · references/
• flutter-xposed-module-build.md · references/
• frida-gadget-no-root-injection.md · references/
• jni-and-login-bypass-pitfalls.md · references/
• large-apk-decompilation.md · references/
• mod-menu-injection.md · references/
• native-library-auto-injection.md · references/
• native-library-bypass-patterns.md · references/
• rushed-cracking-pitfalls.md · references/
• server-side-validation-detection.md · references/
• server-side-validation-reality-check.md · references/
• signing-troubleshooting.md · references/
• split-apk-compatibility-fix.md · references/
• split-apks-signature-consistency.md · references/
• split-apks-signature-mismatch-fix.md · references/
• wibuku-premium-ads-gems-analysis.md · references/

SKILL.md (first lines)

# APK Modding Workflow

Proper workflow for decompiling, modifying, and repackaging Android APK files with modern signature schemes that work on Android 7-15.

## When to Use This Skill

Trigger when the user:
- Wants to mod an APK (premium unlock, remove ads, inject features)
- Asks to modify AndroidManifest.xml or app resources
- Needs to patch smali code or inject custom logic
- Gets "paket tidak valid" / "package appears invalid" install errors
- Asks about APK signing, zipalign, or signature schemes

## Core Problem

**Manual Python `zipfile` repacking FAILS.** It doesn't preserve APK alignment and binary XML structure, causing "Application not installed because package appears invalid" errors on Android 7+.

**`jarsigner` alone is INSUFFICIENT for Android 7+.** It only signs with v1 scheme (JAR signature). Modern Android requires APK Signature Scheme v2/v3.

## The Working Workflow

### Step 1: Install Tools

```bash
# Download apktool (proper decompile/recompile)
cd ~/tools
curl -L -o apktool.jar "https://github.com/iBotPeaches/Apktool/releases/download/v2.10.0/apktool_2.10.0.jar"

# Download uber-apk-signer (zipalign + v1/v2/v3/v4 signing in one step)
curl -L -o uber-apk-signer.jar "https://github.com/patrickfav/uber-apk-signer/releases/download/v1.3.0/uber-apk-signer-1.3.0.jar"
```

### Step 2: Decompile APK

```bash
java -jar apktool.jar d original.apk -o app-decompiled -f
```

**What this does:**
- Decodes binary `AndroidManifest.xml` to readable XML
- Decompiles `classes.dex` to smali code
- Extracts resources with proper structure preservation
- Preserves 9-patch images, binary XMLs, and native libs

### Step 3: Modify

Common modifications:

**A. Make Debuggable (for Frida/runtime hooking):**

Edit `app-decompiled/AndroidManifest.xml`:
```xml
<application android:debuggable="true" ...>
```

**B. Change App Label:**
```xml
<application android:label="App Name PRO" ...>
```

**C. Disable SSL Pinning (if present):**

Search smali for `TrustManager`, `SSLContext`, `HostnameVerifier` and patch validation methods to always return true.

**D. Patch Premium Checks (Java/Kotlin apps only):**

Search smali for `isPremium`, `isSubscribed`, `hasLicense`:
```bash
cd app-decompiled/smali
grep -r "isPremium" .
grep -r "license" .
```

Modify methods to return `const/4 v0, 0x1` (true).

**E. Remove Ads:**

Delete ad library directories from `smali/` (e.g., `smali/com/google/android/gms/ads/`).

### Step 4: Recompile

```bash
java -jar apktool.jar b app-decompiled -o app-modded-unsigned.apk
```

### Step 5: Sign with Modern Signature Schemes

```bash
java -jar uber-apk-signer.jar --apks app-modded-unsigned.apk --allowResign
```

**Output:** `app-modded-aligned-debugSigned.apk`

**What uber-apk-signer does:**
- Zipaligns the APK (4-byte alignment for resources)
- Signs with v1 + v2 + v3 schemes (Android 7-15 compatible)
- Verifies signature after signing
- Uses embedded debug keystore (valid until 2044)

### Step 6: Install

```bash
adb install app-modded-aligned-debugSigned.apk
```

Or send to user via Telegram:
```
MEDIA:/path/to/app-modded-aligned-debugSigned.apk
```

## Alternative: Custom Keystore

If you need a custom keystore (not debug):

```bash
# Generate keystore (one time)
keytool -genkey -v -keystore my.keystore -alias mykey -keyalg RSA -keysize 2048 -validity 10000 -storepass password123 -keypass password123 -dname "CN=YourName, OU=Mod, O=Org, L=City, ST=State, C=ID"

# Sign with custom keystore

From bolone-sengkuni/hermes-brutal-mod, MIT.

More from bolone-sengkuni/hermes-brutal-mod