bash script to verify CVE-2017-13156

verify_CVE-2017-13156.sh

#!/bin/bash

me=`basename "$0"`
echo ":: verify CVE-2017-13156 ::"
echo ":: USAGE  bash $me <filename_.apk> "
command -v apksigner >/dev/null 2>&1 || { echo >&2 "apksigner not in \$PATH.  Aborting."; exit 1; }
command -v apktool >/dev/null 2>&1 || { echo >&2 "apktool not in \$PATH.  Aborting."; exit 1; }
file=$1

echo "verifing signatures"
apksigner verify -verbose $file | head -50 | grep -i 'true'

echo "verify minsdk version"
apktool -f -s d $file
apk_name=$(basename $file .apk)
cat $apk_name/apktool.yml | grep -i minsdk