levyitay / addsecurityexceptionandroid Goto Github PK

When running on WSL I get the following error. Is there any reason why it could fail?

I don't have access to a true Ubuntu machine.

Not able to generate the build.
this shows error

W: /tmp/test/AndroidManifest.xml:66: error: No resource identifier found for attribute 'allowNativeHeapPointerTagging' in package 'android'
W: 
W: /tmp/test/AndroidManifest.xml:375: error: Error: No resource type specified (at 'resource' with value '@2114060288').
W: 
brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/86/zqx0vvz95jd8x6whd0j8d7y50vyzm3/T/brut_util_Jar_2084800958329043937.tmp, p, --forced-package-id, 127, --min-sdk-version, 21, --target-sdk-version, 30, --version-code, 80110423, --version-name, 4.2207.0, --no-version-vectors, -F, /var/folders/86/zqx0vvz95jd8x6whd0j8d7y50vyzm3/T/APKTOOL282281327963132326.tmp, -e, /var/folders/86/zqx0vvz95jd8x6whd0j8d7y50vyzm3/T/APKTOOL5889534043134153033.tmp, -0, arsc, -I, /Users/300063668/Library/apktool/framework/1.apk, -S, /tmp/test/res, -M, /tmp/test/AndroidManifest.xml]
jarsigner: unable to open jar file: ./test_temp.apk
./addSecurityExceptions.sh: line 52: zipalign: command not found
Resigned APK successfully test_new.apk

Even though this shows test_new.apk is generated but its isn't available.
Attaching the image for your reference

I am using the defualt keystore option.

As an apk file. Facebook's Messenger app.
Here is what I get.

W: /tmp/com.facebook.orca_v131.0.0.17.89-68164425_Android-4.0.3/res/values/plurals.xml:312: error: Multiple substitutions specified in non-positional format; did you mean to add the formatted="false" attribute?
W:
W: /tmp/com.facebook.orca_v131.0.0.17.89-68164425_Android-4.0.3/res/values/plurals.xml:312: error: Found tag where is expected
W:
Exception in thread "main" brut.androlib.AndrolibException: brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/ky/r906534s3svbw0l_9m3_mgfm0000gn/T/brut_util_Jar_4762472172826358745.tmp, p, --forced-package-id, 127, --min-sdk-version, 15, --target-sdk-version, 23, --version-code, 68164425, --version-name, 131.0.0.17.89, --no-version-vectors, -F, /var/folders/ky/r906534s3svbw0l_9m3_mgfm0000gn/T/APKTOOL534443114401297775.tmp, -0, arsc, -0, assets/InboxV2Query_MessengerInboxUnits_Nodes.fbs.md5, -0, assets/MessengerBundle.js.meta, -0, txt, -0, assets/java.com.facebook.messaging.particles.downloadableparticles/java.com.facebook.messaging.particles.downloadableparticles-1.dex.jar.xzs.tmp~.meta, -0, assets/java.com.facebook.messaging.particles.downloadableparticles/java.com.facebook.messaging.particles.downloadableparticles.dex.jar.xzs, -0, xzs, -0, assets/secondary-program-dex-jars/secondary.dex.jar.xzs, -0, json, -0, bks, -0, arsc, -I, /Users/andrey/Library/apktool/framework/1.apk, -S, /tmp/com.facebook.orca_v131.0.0.17.89-68164425_Android-4.0.3/res, -M, /tmp/com.facebook.orca_v131.0.0.17.89-68164425_Android-4.0.3/AndroidManifest.xml]

I don't know much about how keystores work, I'm just trying to do some reverse engineering.

I used this to generate a keystore: https://gist.github.com/chtz/4e3f503bae5eb21783e6

It asked for a password and I entered 'aaaaaa' because I didn't know what to write and it didn't let me enter an empty password. But then, when executing this with that keystore file, I got this error:

jarsigner error: java.lang.RuntimeException: keystore load: Keystore was tampered with, or password was incorrect

What should I do?

Thanks

I am on Ubuntu 16.04.6 LTS and I can create a exception version of an app, I am still getting an error with mitmproxy. adb logcat shows:

06-02 00:01:48.191 24113 25761 E AndroidCll-EventQueueWriter: Cannot send event: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

I am however getting https from others. Can I detect if this is cert pinning?

Problem

When running the script, I got this:

W: /tmp/My_Lil_App_v3.0.0/AndroidManifest.xml:3: error: No resource identifier found for attribute 'networkSecurityConfig' in package 'android'
W: 
Exception in thread "main" brut.androlib.AndrolibException: brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/fl/vg_18w991bq_jr2bflnhr2b00000gn/T/brut_util_Jar_6566168031649658064.tmp, p, --forced-package-id, 127, --min-sdk-version, 14, --target-sdk-version, 23, --version-code, 3, --version-name, 3.0.0, -F, /var/folders/fl/vg_18w991bq_jr2bflnhr2b00000gn/T/APKTOOL8666138019041163139.tmp, -0, arsc, -I, /Users/aom/Library/apktool/framework/1.apk, -S, /tmp/My_Lil_App_v3.0.0/res, -M, /tmp/My_Lil_App_v3.0.0/AndroidManifest.xml]
	at brut.androlib.Androlib.buildResourcesFull(Androlib.java:473)
	at brut.androlib.Androlib.buildResources(Androlib.java:407)
	at brut.androlib.Androlib.build(Androlib.java:306)
	at brut.androlib.Androlib.build(Androlib.java:263)
	at brut.apktool.Main.cmdBuild(Main.java:224)
	at brut.apktool.Main.main(Main.java:84)
Caused by: brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/fl/vg_18w991bq_jr2bflnhr2b00000gn/T/brut_util_Jar_6566168031649658064.tmp, p, --forced-package-id, 127, --min-sdk-version, 14, --target-sdk-version, 23, --version-code, 3, --version-name, 3.0.0, -F, /var/folders/fl/vg_18w991bq_jr2bflnhr2b00000gn/T/APKTOOL8666138019041163139.tmp, -0, arsc, -I, /Users/aom/Library/apktool/framework/1.apk, -S, /tmp/My_Lil_App_v3.0.0/res, -M, /tmp/My_Lil_App_v3.0.0/AndroidManifest.xml]
	at brut.androlib.res.AndrolibResources.aaptPackage(AndrolibResources.java:439)
	at brut.androlib.Androlib.buildResourcesFull(Androlib.java:459)
	... 5 more
Caused by: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/fl/vg_18w991bq_jr2bflnhr2b00000gn/T/brut_util_Jar_6566168031649658064.tmp, p, --forced-package-id, 127, --min-sdk-version, 14, --target-sdk-version, 23, --version-code, 3, --version-name, 3.0.0, -F, /var/folders/fl/vg_18w991bq_jr2bflnhr2b00000gn/T/APKTOOL8666138019041163139.tmp, -0, arsc, -I, /Users/aom/Library/apktool/framework/1.apk, -S, /tmp/My_Lil_App_v3.0.0/res, -M, /tmp/My_Lil_App_v3.0.0/AndroidManifest.xml]
	at brut.util.OS.exec(OS.java:95)
	at brut.androlib.res.AndrolibResources.aaptPackage(AndrolibResources.java:433)
	... 6 more
jarsigner: unable to open jar file: ./My_Lil_App_v3.0.0_new.apk

Solution

Turned out I had apktool 2.2.0 installed.
When I upgraded it to 2.2.2, the mentioned warning did not appear.

Opening an issue here to let you and others know. Might want to add a "apktool 2.2.2 or above is required" to readme. Thanks for a nice utility!

https://cr.openjdk.java.net/~iris/se/12/latestSpec/api/java.base/java/security/Signer.html

I don't have time to make a pull request, but you should add this to the description:

• Keystore password should be android
• Keystore alias should be androiddebugkey

Other than that, I had no issues getting this to work. The APK I got, had malformed XML in it, which meant apktool could not generate the APK file. Seems like there is no way to ignore that, so I had to go fix the XML errors myself, then run the apktool and jarsigner commands individually.

Thanks

It seems required to quote the variables in bash that contain a path which may contain spaces.

On some APK's I get the error "Invalid resource directory name ....[apkname]\res navigation".

I am hoping you can please share what I am doing wrong? I have attached an example APK (as a ZIP, because Github doesn't like APK files) where this issue occurs. I have also linked the source of the apk: https://apkpure.com/truecoach-for-clients/co.truecoach.client

co.truecoach.client.zip

I should note that your tool works for most APK's.

Thank you for your time

Facing below exception form apktool while running the script:

Exception in thread "main" brut.androlib.AndrolibException: Invalid chunk type: expected=0x00000200, got=0x00000203 at brut.androlib.res.decoder.ARSCDecoder.checkChunkType(ARSCDecoder.java:542) at brut.androlib.res.decoder.ARSCDecoder.readTablePackage(ARSCDecoder.java:88) at brut.androlib.res.decoder.ARSCDecoder.readTableHeader(ARSCDecoder.java:82) at brut.androlib.res.decoder.ARSCDecoder.decode(ARSCDecoder.java:48) at brut.androlib.res.AndrolibResources.getResPackagesFromApk(AndrolibResources.java:786) at brut.androlib.res.AndrolibResources.loadMainPkg(AndrolibResources.java:67) at brut.androlib.res.AndrolibResources.getResTable(AndrolibResources.java:59) at brut.androlib.Androlib.getResTable(Androlib.java:66) at brut.androlib.ApkDecoder.setTargetSdkVersion(ApkDecoder.java:236) at brut.androlib.ApkDecoder.decode(ApkDecoder.java:118) at brut.apktool.Main.cmdDecode(Main.java:170) at brut.apktool.Main.main(Main.java:76)

P.S. This is an ongoing issue with APKTool!!
We need to look for an alternative of APKTool as without that this Utility would be inefficient.

Hello, excuse me, I have some problems with this script, I would like to ask if this tool can be used in window or must be used in linux, and what dependencies it depends on, I only saw java in the readme, I tried to test it directly in window, but it reported an error, of course I haven't installed java, just want to I just want to see what dependencies are needed, it looks like more than java?

eg:Android 、keytools？Can you tell me the dependencies and version requirements, please?

One last question, does it work for flutter apps.

this fb messenger apk throws an exception when ran through the tool. I also worry that the script doesnt exit when a failure occurs. It just ends with "Resigned APK successfully"

andrew  AddSecurityExceptionAndroid  ./addSecurityExceptions.sh Messenger\ –\ Text\ and\ Video\ Chat\ for\ Free_v321.0.0.16.119_apkpure.com.apk 
I: Using Apktool 2.4.1 on Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com.apk
I: Loading resource table...
Exception in thread "main" brut.androlib.AndrolibException: unsupported res type name for bags. Found: style2
	at brut.androlib.res.data.value.ResValueFactory.bagFactory(ResValueFactory.java:119)
	at brut.androlib.res.decoder.ARSCDecoder.readComplexEntry(ARSCDecoder.java:350)
	at brut.androlib.res.decoder.ARSCDecoder.readEntryData(ARSCDecoder.java:276)
	at brut.androlib.res.decoder.ARSCDecoder.readTableType(ARSCDecoder.java:252)
	at brut.androlib.res.decoder.ARSCDecoder.readTableTypeSpec(ARSCDecoder.java:175)
	at brut.androlib.res.decoder.ARSCDecoder.readTablePackage(ARSCDecoder.java:131)
	at brut.androlib.res.decoder.ARSCDecoder.readTableHeader(ARSCDecoder.java:82)
	at brut.androlib.res.decoder.ARSCDecoder.decode(ARSCDecoder.java:48)
	at brut.androlib.res.AndrolibResources.getResPackagesFromApk(AndrolibResources.java:786)
	at brut.androlib.res.AndrolibResources.loadMainPkg(AndrolibResources.java:67)
	at brut.androlib.res.AndrolibResources.getResTable(AndrolibResources.java:59)
	at brut.androlib.Androlib.getResTable(Androlib.java:66)
	at brut.androlib.ApkDecoder.setTargetSdkVersion(ApkDecoder.java:236)
	at brut.androlib.ApkDecoder.decode(ApkDecoder.java:118)
	at brut.apktool.Main.cmdDecode(Main.java:170)
	at brut.apktool.Main.main(Main.java:76)
mkdir: cannot create directory ‘/tmp/Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com/res/xml’: No such file or directory
cp: cannot create regular file '/tmp/Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com/res/xml/.': No such file or directory
grep: /tmp/Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com/AndroidManifest.xml: No such file or directory
sed: can't read /tmp/Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com/AndroidManifest.xml: No such file or directory
W: Can't empty framework directory, no file found at: /home/andrew/.local/share/apktool/framework/1.apk
Building temp APK Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com_temp.apk
I: Using Apktool 2.4.1
brut.directory.PathNotExist: apktool.yml
jarsigner: unable to open jar file: ./Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com_temp.apk
Zip alignment utility
Copyright (C) 2009 The Android Open Source Project

Usage: zipalign [-f] [-p] [-v] [-z] <align> infile.zip outfile.zip
       zipalign -c [-p] [-v] <align> infile.zip

  <align>: alignment in bytes, e.g. '4' provides 32-bit alignment
  -c: check alignment only (does not modify file)
  -f: overwrite existing outfile.zip
  -p: memory page alignment for stored shared object files
  -v: verbose output
  -z: recompress using Zopfli
Resigned APK successfully Messenger – Text and Video Chat for Free_v321.0.0.16.119_apkpure.com_new.apk

it also looks like zipalign args need to be wrapped in quotes, otherwise filenames with spaces will give the zipalign error

We want to be able to use non debug keystore that has it own alias and password.

to be added:

• support for extra parameters --keystore_alias and --keystore_password
• support using those extra params in the script

The apk was a production apk.
Command: ./addSecurityExceptions.sh original_apkfile.apk
I tried sudo as well but same exception.

Exception in thread "main" brut.androlib.AndrolibException: brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/brut_util_Jar_2621850001535583170.tmp, p, --forced-package-id, 127, --min-sdk-version, 14, --target-sdk-version, 21, --version-code, 136, --version-name, 1.5.32, -F, /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/APKTOOL1968343114380978702.tmp, -0, arsc, -0, sql, -0, arsc, -I, /var/root/Library/apktool/framework/1.apk, -S, /tmp/com.example.hh_1.5.32-136/res, -M, /tmp/com.example.hh_1.5.32-136/AndroidManifest.xml]
at brut.androlib.Androlib.buildResourcesFull(Androlib.java:437)
at brut.androlib.Androlib.buildResources(Androlib.java:371)
at brut.androlib.Androlib.build(Androlib.java:281)
at brut.androlib.Androlib.build(Androlib.java:254)
at brut.apktool.Main.cmdBuild(Main.java:224)
at brut.apktool.Main.main(Main.java:84)
Caused by: brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/brut_util_Jar_2621850001535583170.tmp, p, --forced-package-id, 127, --min-sdk-version, 14, --target-sdk-version, 21, --version-code, 136, --version-name, 1.5.32, -F, /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/APKTOOL1968343114380978702.tmp, -0, arsc, -0, sql, -0, arsc, -I, /var/root/Library/apktool/framework/1.apk, -S, /tmp/com.example.hh_1.5.32-136/res, -M, /tmp/com.example.hh_1.5.32-136/AndroidManifest.xml]
at brut.androlib.res.AndrolibResources.aaptPackage(AndrolibResources.java:436)
at brut.androlib.Androlib.buildResourcesFull(Androlib.java:423)
... 5 more
Caused by: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/brut_util_Jar_2621850001535583170.tmp, p, --forced-package-id, 127, --min-sdk-version, 14, --target-sdk-version, 21, --version-code, 136, --version-name, 1.5.32, -F, /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/APKTOOL1968343114380978702.tmp, -0, arsc, -0, sql, -0, arsc, -I, /var/root/Library/apktool/framework/1.apk, -S, /tmp/com.example.hh_1.5.32-136/res, -M, /tmp/com.example.hh_1.5.32-136/AndroidManifest.xml]
at brut.util.OS.exec(OS.java:95)
at brut.androlib.res.AndrolibResources.aaptPackage(AndrolibResources.java:430)
... 6 more
jarsigner: unable to open jar file: ./com.example.hh_1.5.32-136_new.apk

I tried to add exception to this app: http://client.3g.fang.com/http/wap/index.html

But I got jarsigner: unable to open jar file

I: Using Apktool 2.4.1 on soufun_android_30000_9.0.1.apk
I: Loading resource table...
I: Decoding AndroidManifest.xml with resources...
Exception in thread "main" brut.androlib.AndrolibException: brut.directory.DirectoryException: java.io.FileNotFoundException: /tmp/soufun_android_30000_9.0.1/AndroidManifest.xml (Permission denied)
	at brut.androlib.res.decoder.ResFileDecoder.decodeManifest(ResFileDecoder.java:164)
	at brut.androlib.res.AndrolibResources.decodeManifestWithResources(AndrolibResources.java:204)
	at brut.androlib.Androlib.decodeManifestWithResources(Androlib.java:134)
	at brut.androlib.ApkDecoder.decode(ApkDecoder.java:122)
	at brut.apktool.Main.cmdDecode(Main.java:170)
	at brut.apktool.Main.main(Main.java:76)
Caused by: brut.directory.DirectoryException: java.io.FileNotFoundException: /tmp/soufun_android_30000_9.0.1/AndroidManifest.xml (Permission denied)
	at brut.directory.FileDirectory.getFileOutputLocal(FileDirectory.java:80)
	at brut.directory.AbstractDirectory.getFileOutput(AbstractDirectory.java:116)
	at brut.androlib.res.decoder.ResFileDecoder.decodeManifest(ResFileDecoder.java:160)
	... 5 more
Caused by: java.io.FileNotFoundException: /tmp/soufun_android_30000_9.0.1/AndroidManifest.xml (Permission denied)
	at java.io.FileOutputStream.open0(Native Method)
	at java.io.FileOutputStream.open(FileOutputStream.java:270)
	at java.io.FileOutputStream.<init>(FileOutputStream.java:213)
	at java.io.FileOutputStream.<init>(FileOutputStream.java:101)
	at brut.directory.FileDirectory.getFileOutputLocal(FileDirectory.java:78)
	... 7 more
cp: cannot create regular file '/tmp/soufun_android_30000_9.0.1/res/xml/./network_security_config.xml': Permission denied
I: Removing 1.apk framework file...
Building new APK soufun_android_30000_9.0.1_new.apk
I: Using Apktool 2.4.1
brut.directory.PathNotExist: apktool.yml
jarsigner: unable to open jar file: ./soufun_android_30000_9.0.1_new.apk

When i try to install the modified apk it throws me that error.

Steps to reproduce:
1.- Clone the repository
2.- Copy the apk file inside the repository's folder
3.- Open a Powershell terminal and execute ".\addSecurityExceptions.sh .\app_name.apk"
4.- Copy the app_name_new.apk to the phone and tap to install.

Hey! I get this error on a codespace, maybe if someone can help me ;)

Running Zip Align on network.xyo.coin_temp.apk and creating network.xyo.coin_new.apk
./addSecurityExceptions.sh: line 88: /home/codespace/Library/Android/sdk/build-tools/*//zipalign: No such file or directory
Signing temp file network.xyo.coin_new.apk
./addSecurityExceptions.sh: line 91: /home/codespace/Library/Android/sdk/build-tools/*//apksigner: No such file or directory
Resigned APK successfully network.xyo.coin_new.apk

This tool somehow requires apktool 2.4.1 which has not been released yet.

I am using the defualt keystore option.

I: Using Apktool 2.2.4 on base.apk
I: Loading resource table...
I: Decoding AndroidManifest.xml with resources...
I: Loading resource table from file: /var/root/Library/apktool/framework/1.apk
I: Regular manifest package...
I: Decoding file-resources...
S: Could not decode file, replacing by FALSE value: font/lato_semi_bold_italic.ttf
S: Could not decode file, replacing by FALSE value: font/lato_regular_italic.ttf
S: Could not decode file, replacing by FALSE value: font/lato_regular.ttf
S: Could not decode file, replacing by FALSE value: font/lato_bold.ttf
S: Could not decode file, replacing by FALSE value: font/lato_light.ttf
S: Could not decode file, replacing by FALSE value: font/lato_light_italic.ttf
I: Decoding values / XMLs...
I: Baksmaling classes.dex...
I: Baksmaling classes2.dex...
I: Copying assets and libs...
I: Copying unknown files...
I: Copying original files...
I: Removing 1.apk framework file...
Building new APK base_new.apk
I: Using Apktool 2.2.4
I: Checking whether sources has changed...
I: Smaling smali folder into classes.dex...
I: Checking whether sources has changed...
I: Smaling smali_classes2 folder into classes2.dex...
I: Checking whether resources has changed...
I: Building resources...
W: invalid resource directory name: /tmp/base/res font
Exception in thread "main" brut.androlib.AndrolibException: brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/brut_util_Jar_4241409149410193573.tmp, p, --forced-package-id, 127, --min-sdk-version, 19, --target-sdk-version, 27, --version-code, 14336, --version-name, 4.14.0, --no-version-vectors, -F, /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/APKTOOL5722066547825444843.tmp, -0, arsc, -0, arsc, -I, /var/root/Library/apktool/framework/1.apk, -S, /tmp/base/res, -M, /tmp/base/AndroidManifest.xml]
at brut.androlib.Androlib.buildResourcesFull(Androlib.java:496)
at brut.androlib.Androlib.buildResources(Androlib.java:430)
at brut.androlib.Androlib.build(Androlib.java:329)
at brut.androlib.Androlib.build(Androlib.java:267)
at brut.apktool.Main.cmdBuild(Main.java:230)
at brut.apktool.Main.main(Main.java:83)
Caused by: brut.androlib.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/brut_util_Jar_4241409149410193573.tmp, p, --forced-package-id, 127, --min-sdk-version, 19, --target-sdk-version, 27, --version-code, 14336, --version-name, 4.14.0, --no-version-vectors, -F, /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/APKTOOL5722066547825444843.tmp, -0, arsc, -0, arsc, -I, /var/root/Library/apktool/framework/1.apk, -S, /tmp/base/res, -M, /tmp/base/AndroidManifest.xml]
at brut.androlib.res.AndrolibResources.aaptPackage(AndrolibResources.java:441)
at brut.androlib.Androlib.buildResourcesFull(Androlib.java:482)
... 5 more
Caused by: brut.common.BrutException: could not exec (exit code = 1): [/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/brut_util_Jar_4241409149410193573.tmp, p, --forced-package-id, 127, --min-sdk-version, 19, --target-sdk-version, 27, --version-code, 14336, --version-name, 4.14.0, --no-version-vectors, -F, /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/APKTOOL5722066547825444843.tmp, -0, arsc, -0, arsc, -I, /var/root/Library/apktool/framework/1.apk, -S, /tmp/base/res, -M, /tmp/base/AndroidManifest.xml]
at brut.util.OS.exec(OS.java:95)
at brut.androlib.res.AndrolibResources.aaptPackage(AndrolibResources.java:435)

Current latest is 2.4.0 and I had to substitute that for the script to work.

I downloaded from here: https://bitbucket.org/iBotPeaches/apktool/downloads/

I'm running the script, (I'm using wsl in windows 10)
And an error appears:
./addSecurityExceptions.sh: line 49: jarsigner: command not found

what can be done?
Is it a script bug or a problem on my computer?

HI ,

We are using appium library with BMP (https://github.com/lightbody/browsermob-proxy) to capture requests from native android app. Till version 6, it was fine but from android 7 onwards, the existing solution did not worked, perhaps due to google security restriction.

I tried ur script but still not able to intercept traffic...

Pls let me know if you can give some pointers.

Thanks

I'm trying to run the script on a split APK that consists of three parts:
In this case, for example:
https://play.google.com/store/apps/details?id=com.pepper.ldb
The parts can be downloaded from here:
https://apk.support/apk-downloader

Basically, the security exception should only be fixed in the base.apk manifest,
But the other files should also be changed to the same signature as the base.apk.
Otherwise the signatures will be contradictory.

I would appreciate if you can add support in split APK