0% found this document useful (0 votes)
4 views5 pages

Steps

This document outlines the steps to set up a lab environment for testing Android applications, including the installation of necessary tools and the creation of virtual devices. It details the process of verifying app behavior, building a malicious app, and preparing the project for submission. Additionally, it includes instructions for testing the app and uploading the final project file for evaluation.

Uploaded by

Ali Ganiyev
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
4 views5 pages

Steps

This document outlines the steps to set up a lab environment for testing Android applications, including the installation of necessary tools and the creation of virtual devices. It details the process of verifying app behavior, building a malicious app, and preparing the project for submission. Additionally, it includes instructions for testing the app and uploading the final project file for evaluation.

Uploaded by

Ali Ganiyev
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

unzip it

you will find a [Link] file

move that to kali

inside there

tar -xvzf [Link]

cd [Link]/

sudo apt update

sudo apt install openjdk-11-jdk

sudo apt install gradle

./gradlew build

emulator -avd <your_avd_name>

adb devices

adb install <path_to_apk_file>

adb shell am start -n <package_name>/<activity_name>


Step 1 — Prepare Your Lab Environment
(This is important before starting testing.)

✅ Install Android Emulator (e.g., Android Studio AVD)

SDK Version 24 (Android 7.0)

Create TWO virtual devices:

Device 1 → Install [Link] and [Link]

Device 2 → Install PwdManager_TEST.apk and SafeNote_TEST.apk

✅ On both devices:

Install the target apps.

Open and run them once manually (important! Apps create their files on first run).

Step 2 — Verify Target Apps Behavior


✅ Launch:

[Link] → Save dummy password

[Link] → Save dummy note

✅ Launch:

PwdManager_TEST.apk → Different dummy data

SafeNote_TEST.apk → Different dummy data

Step 3 — Use or Modify Your Malicious App


✅ You already have expAPP (solution ready):

It reads data from content providers.

It decrypts using MD5 PIN.

It does NOT use any permissions.

It shows captured passwords and notes (Toast messages).

✅ Minor things to double-check:

Target SDK version 24 ([Link])


No permission in [Link]

Step 4 — Build Your APK


Inside your expAPP folder:

./gradlew assembleDebug

APK will be at:

expAPP/app/build/outputs/apk/debug/[Link]

✅ Rename it to:

cp app/build/outputs/apk/debug/[Link] [Link]

✅ Place [Link] inside the root of your project folder.

🛠 Step 5 — Test Your Malicious App


✅ Now install your [Link] (malicious app) on:

Device 1 (with [Link] + [Link])

Device 2 (with PwdManager_TEST.apk + SafeNote_TEST.apk)

✅ Launch your app:

It should automatically read passwords and notes.

Show them using Toast or Logcat.

✅ Important:

Test on both devices and ensure success without changing anything.

🛠 Step 6 — Pack for Submission


✅ Go to parent folder:

cd ..

✅ Create .[Link] of your full project:

tar -czvf yourname_eMAPT_solution.[Link] expAPP/


✅ This .[Link] must contain:

Source code (.java files)

[Link]

[Link]

Your [Link]

Step 7 — Upload Your Exam Submission


✅ Go to eLearnSecurity Member’s Area → My Exams → eMAPT → Submit.

✅ Upload your .[Link] file.

Screenshot Checklist (If needed)

Your [Link] running showing stolen password/note.

Emulator screen showing [Link] and [Link] installed

Emulator screen showing PwdManager_TEST.apk and SafeNote_TEST.apk installed.

(Good to keep just in case they ask!)

Step 1 → Install PwdManager + add password → emulator

➡️Step 2 → Use adb to read:


adb shell

cd /data/data/[Link]/shared_prefs

ls

cat <[Link]>

OR

cd /data/data/[Link]/databases

ls

sqlite3 <[Link]>

.tables

select * from <tablename>;

You might also like