unzip it
you will find a [Link] file
move that to kali
inside there
tar -xvzf [Link]
cd [Link]/
sudo apt update
sudo apt install openjdk-11-jdk
sudo apt install gradle
./gradlew build
emulator -avd <your_avd_name>
adb devices
adb install <path_to_apk_file>
adb shell am start -n <package_name>/<activity_name>
Step 1 — Prepare Your Lab Environment
(This is important before starting testing.)
✅ Install Android Emulator (e.g., Android Studio AVD)
SDK Version 24 (Android 7.0)
Create TWO virtual devices:
Device 1 → Install [Link] and [Link]
Device 2 → Install PwdManager_TEST.apk and SafeNote_TEST.apk
✅ On both devices:
Install the target apps.
Open and run them once manually (important! Apps create their files on first run).
Step 2 — Verify Target Apps Behavior
✅ Launch:
[Link] → Save dummy password
[Link] → Save dummy note
✅ Launch:
PwdManager_TEST.apk → Different dummy data
SafeNote_TEST.apk → Different dummy data
Step 3 — Use or Modify Your Malicious App
✅ You already have expAPP (solution ready):
It reads data from content providers.
It decrypts using MD5 PIN.
It does NOT use any permissions.
It shows captured passwords and notes (Toast messages).
✅ Minor things to double-check:
Target SDK version 24 ([Link])
No permission in [Link]
Step 4 — Build Your APK
Inside your expAPP folder:
./gradlew assembleDebug
APK will be at:
expAPP/app/build/outputs/apk/debug/[Link]
✅ Rename it to:
cp app/build/outputs/apk/debug/[Link] [Link]
✅ Place [Link] inside the root of your project folder.
🛠 Step 5 — Test Your Malicious App
✅ Now install your [Link] (malicious app) on:
Device 1 (with [Link] + [Link])
Device 2 (with PwdManager_TEST.apk + SafeNote_TEST.apk)
✅ Launch your app:
It should automatically read passwords and notes.
Show them using Toast or Logcat.
✅ Important:
Test on both devices and ensure success without changing anything.
🛠 Step 6 — Pack for Submission
✅ Go to parent folder:
cd ..
✅ Create .[Link] of your full project:
tar -czvf yourname_eMAPT_solution.[Link] expAPP/
✅ This .[Link] must contain:
Source code (.java files)
[Link]
[Link]
Your [Link]
Step 7 — Upload Your Exam Submission
✅ Go to eLearnSecurity Member’s Area → My Exams → eMAPT → Submit.
✅ Upload your .[Link] file.
Screenshot Checklist (If needed)
Your [Link] running showing stolen password/note.
Emulator screen showing [Link] and [Link] installed
Emulator screen showing PwdManager_TEST.apk and SafeNote_TEST.apk installed.
(Good to keep just in case they ask!)
Step 1 → Install PwdManager + add password → emulator
➡️Step 2 → Use adb to read:
adb shell
cd /data/data/[Link]/shared_prefs
ls
cat <[Link]>
OR
cd /data/data/[Link]/databases
ls
sqlite3 <[Link]>
.tables
select * from <tablename>;