Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Preserve multiplexed APK #67

Open
ghost opened this issue Aug 19, 2023 · 2 comments
Open

Preserve multiplexed APK #67

ghost opened this issue Aug 19, 2023 · 2 comments

Comments

@ghost
Copy link

ghost commented Aug 19, 2023

Describe the bug
Since we bypass security with original APK inside modified APK, we needed to multiplex APK in order to reduce the size of APK.
APKEditor does not support multiplexed APK, so any modifications will lose multiplex and revert size to original. For example, multiplexed APK is 189 MB. After modification using APKEditor, the size reverts back to 369 MB

image

See the details how multiplex technique works. The source is written in Java too, makes it easier to adopt to your project! https://github.com/L-JINBIN/ApkDataMultiplexing

To Reproduce
Steps to reproduce the behavior:
I don't want to give details about bypassing but you can easly replicate it

  1. Put original APK inside an APK you want to be modified (e.g. /assets/sample.apk)
  2. Multiplex the APK file from /assets/sample.apk using ApkDataMultiplexing. You need your own jks file to sign and multiplex it
  3. Make any modifications using APKEditor

Used apk file
https://mega.nz/file/PRRRBBQJ#8EYVX3gI1ejL1cSZmfTQtWkyo5Ay69CMhIKGKqI7siw

@REAndroid
Copy link
Owner

My first time hearing about "multiplexed APK", i might be wrong but this methods is not popular (one-person-technique). Since APKEditor is on early stage, it does not worth to consider such features. Moreover we don't have good signing lib that don't affect APKEditor's performance.

Maybe it's good idea to make plugin interface to satisfy everyone's interest.

@ghost
Copy link
Author

ghost commented Aug 20, 2023

Hmm ok. Well, this method is quite popular in Asian and it's only widespread among Telegram and QQ groups at the moment. It's a matter of time it will get widespread on Western-side

I mostly used APKEditor to restore original signature for unsigned APK because it fixes Google login. The only disadvange is lack of multiplex, so I either have to choose one of them

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant