Mobile Pentest

How a Backdoor Work in Apk File

About Me
● Developer of dracOs GNU/Linux.
● Contributor of OWASP Chapter Jakarta.
● Interest in Mobile Pentest, RE, Malware Analysis and WebSec Apps.
What is Backdoor?
● Software or mechanism to access a victim system.
● Get remote access of target.
● Then, attacker controlled your system!
Let’s get started!
Create 2 directory for original Apk and backdoored Apk
Download Apk File https://apkpure.com/
Extract Original Apk File
$ unzip filename.apk
Let’s backdooring the Apk file
Generate Backdoor to Apk using TheFatRat
Then, rename and extract
backdoored Apk file.
What’s the difference?
File Size
Before After

43.9 Mb 44.2 Mb
File on META-INF
META-INF on LINE.apk without backdoor

META-INF on LINE.apk with backdoor

 Proof of Concept

CERT.SF
Backdoor Bypass
CERT.RSA

SIGNING_.SF
Backdoor Embedded SIGNING_.RSA
Anticipation
● Check original Apk file size.
● Scan your Apk using antivirus.
● Don’t disable your antivirus.
Thank you