Patching APKs
After decompiling the code, you can change code and build the app again to patch the APK, and make it do different things
Last updated
After decompiling the code, you can change code and build the app again to patch the APK, and make it do different things
Last updated
Patching APKs works by changing the Smali code. To get this code, use to decompile it:
After that has finished, you will find a smali/ folder in the output folder of the above command. This contains all the Smali code which is a human-readable assembly for Android. You can open this in your favorite editor to change any of the instructions or values.
For example, you may find a number responsible for the required score, that you can change to a lower number to bypass some checks.
It is often difficult to make big changes to the Smali code, but you can pretty easily change number values or strings in the .smali files. After making the changes you want, you can turn it back into an APK file to run in Android Studio.
To build this after making the changes in your smali/ folder, go to the top directory again, and use apktool to build the APK:
Now you will find an APK file in app/dist/app.apk with your changes. However, to actually be able to run it on an Android device, you first need to sign it.
To verify the integrity of apps, they must be signed by someone before being able to run on the device. This includes emulated devices, so we need to first sign the patched APK before trying to run it in Android Studio.
This specific command will create a keystore with the following attributes (which can be anything) that we'll need later:
Alias: apk
Passwords: password
After this has been created, use apksigner command to use this keystore, and sign the aligned APK:
Finally, the fully signed APK should be stored in app/dist/app-signed.apk. You can verify this using apksigner verify:
This .apk file can now successfully be imported into Android Studio, and emulated on a device to run your patched application.
The first thing you need to do before signing is to align the APK file. This can be done with the tool:
After which, you can actually get to the signing. For this, we can use the tool made for this. It needs a few files first, like a keystore to read the certificate from. If you do not have a keystore key, which you likely won't if this is the first time you are signing an APK, you can create one with the following command using :