Skip to content

Instantly share code, notes, and snippets.

@y0ug
Last active March 7, 2022 14:14
Show Gist options
  • Save y0ug/dbe0b06c97193349451d32af06e765e5 to your computer and use it in GitHub Desktop.
Save y0ug/dbe0b06c97193349451d32af06e765e5 to your computer and use it in GitHub Desktop.

Android Emulator

Packages

brew cask install adoptopenjdk8
brew cask install android-sdk
brew cask install intel-haxm

Setup

export ANDROID_SDK_ROOT="/usr/local/share/android-sdk"
export ANDROID_HOME=$ANDROID_SDK_ROOT

export PATH=$PATH:$ANDROID_HOME/platform-tools/
export PATH=$PATH:$ANDROID_HOME/tools/bin/
export PATH=$PATH:$ANDROID_HOME/tools/
export PATH=$ANDROID_HOME/emulator/:$PATH

sdkmanager --install emulator
sdkmanager --install 'platform-tools'

sdkmanager --install 'extras;intel;Hardware_Accelerated_Execution_Manager'

Android 10

sdkmanager --install 'platforms;android-29'
sdkmanager --install 'system-images;android-29;google_apis_playstore;x86_64'
sdkmanager --install 'system-images;android-29;default;x86_64'
avdmanager create avd -f -n test -d 17 -k 'system-images;android-29;default;x86_64'

Android 9

sdkmanager --install 'platforms;android-28'
sdkmanager --install 'system-images;android-28;google_apis_playstore;x86_64'
sdkmanager --install 'system-images;android-28;default;x86_64'
avdmanager create avd -f -n test -d 17 -k 'system-images;android-28;default;x86_64'

Android 8

sdkmanager --install 'platforms;android-27'
sdkmanager --install 'system-images;android-27;google_apis_playstore;x86_64'
sdkmanager --install 'system-images;android-27;default;x86_64'
avdmanager create avd -f -n test -k 'system-images;android-27;default;x86_64'

SSL burp

Burp generated cert has an issue with experiration on Android apparently

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout pk.key -out cacert.crt
openssl pkcs12 -export -out cacert.p12 -inkey ca.key -certfile certificate.crt -in cacert.crt
HASH=$(openssl x509 -inform PEM -subject_hash_old -in cacert.pem | head -1)
cp cacert.crt $HASH.0

Convert burp der to pem

openssl x509 -inform DER -in burp_ca.cer -out cacert.pem
HASH=$(openssl x509 -inform PEM -subject_hash_old -in cacert.pem | head -1)
mv cacert.pem $HASH.0

Start and setup

emulator -writable-system -selinux disabled  -dns-server 8.8.8.8 -avd test 

adb root
adb disable-verity
adb reboot
adb root
adb remount
adb push <cert>.0 /sdcard/

adb push <cert> /system/etc/security/cacerts/
adb shell cgmod 644 system/etc/security/cacerts/<cert>

Google play services

Download package from https://opengapps.org/ need a lot of storage to install it

https://gist.github.com/cunneen/1c0d9717f8ce5ea76900ba32fa037047

Install script unzip, lzip. Emulator need to be stop before running the command. If more space need restart emulator with -partition-size 4096 (size in MB)

wget https://gist.github.com/cunneen/1c0d9717f8ce5ea76900ba32fa037047/raw/13eddb1d16519c13ab687a5a3b006ced1436b229/open_gapps_install_script.sh
chmod +x open_gapps_install_script.sh 
./open_gapps_install_script.sh  
./open_gapps_install_script.sh open_gapps-x86_64-9.0-stock-20191012.zip

Frida

wget https://github.com/frida/frida/releases/download/12.7.9/frida-server-12.7.9-android-x86_64.xz
xz -d frida-server-12.7.9-android-x86_64.xz
adb push frida-server-12.7.9-android-x86_64 /data/local/tmp/frida-server

wget https://github.com/frida/frida/releases/download/12.7.4/frida-server-12.7.4-android-x86_64.xz
xz -d frida-server-12.7.4-android-x86_64.xz
adb push frida-server-12.7.4-android-x86_64 /data/local/tmp/frida-server
adb shell chmod +x /data/local/tmp/frida-server

adb root
adb shell /data/local/tmp/frida-server

python3 -m pip install --user frida frida-tools objection

frida-ps -U
objection -g mega.privacy.android.app explore
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment