How To Automatically Embed Payloads In APK's - Evil-Droid, Thefatrat & Apkinjector
Keywords
Summary
133 words
Critical Evaluation
Value of the Information & Strength of the Argument
The video provides practical value by comparing multiple tools and showing real results, including failures. The argumentation is solid: he explains why MSF Venom often fails, why Evil-Droid is reliable, and why TheFatRat is not suited for Android. He also demonstrates the entire workflow, including starting a Metasploit handler and testing on an emulator, which validates the effectiveness of the method. The step-by-step approach makes the content actionable.
Scientific Rigor, Source Quality, Title Accuracy
The sources are the GitHub repositories for Evil-Droid and APK Injector, which are directly relevant. The title accurately reflects the content, focusing on the three tools. The video is a tutorial, so it does not provide external scientific references, but the demonstration itself serves as evidence. The presenter also mentions that some tools are outdated, showing a critical perspective.
142 words
Title / Content Match
The title accurately describes the content: automatic payload embedding in APKs using three specific tools.
Quality & Reliability
8/10
The video is a practical, step-by-step demonstration of multiple tools, clearly showing successes and failures. The presenter identifies specific technical reasons for failures, adding credibility. However, the content is from 2019 and tools may have evolved, which slightly affects current reliability.
Key Moments
Markers derived by PSI from the transcript: the creator did not define chapters.
- Introduction and sponsor Dashlane
- Explanation of why automate the process
- Testing MSF Venom and observing recompilation error
- Setting up Evil-Droid and starting the tool
- Configuring payload and host APK in Evil-Droid
- Injection process, signing, and zip-aligning
- Deploying and executing on emulator; gaining session
- Attempting TheFatRat and encountering signature verification failure
- Demonstrating APK Injector with manual activity specification
- Final confirmation of successful injection and conclusion
Cited Sources
- Evil-Droid GitHub Repository — Tool used for automated APK backdooring.
- APK Injector GitHub Repository — Tool demonstrated for APK injection with manual activity selection.
External References
Contribution & Novelties
The video contributes a comparative analysis of three automated APK backdooring tools, highlighting their strengths and weaknesses in a practical demonstration. It also clarifies the importance of host APK compatibility and the role of manual activity specification in tools like APK Injector.
Pour aller plus loin :
- Metasploit Project — The framework used for payload generation and handler, essential context for understanding exploitation.
- Apktool — The underlying tool for decompiling and recompiling APKs used in the process.
- Android Application Security Guide — Official guidelines for evaluating and securing Android apps, relevant for defenders.
93 words
Radar Profile
The scores reflect a high technical level and strong reliability, with good information density. The video excels in practical application, while the theoretical depth is adequate for a tutorial.
💬 Overall very positive, with many viewers praising the clear explanations and practical value. Some comments report technical errors like 'FAILED TO VERIFY SIGNED ARTIFACTS' and 'Debug key not found', indicating common issues users face. On the 30 comments analyzed, the sentiment is predominantly positive.