# dana-at-cp/backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

Repository: https://github.com/dana-at-cp/backdoor-apk
Canonical: https://ross.abutalabs.com/products/backdoor-apk
Language: Shell
License: Apache-2.0
License Family: permissive
Topics: metasploit, smali, apktool, apk, android-sdk, android, android-development
Last push: 2022-09-12T16:32:29+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3813, "days_push": 1451, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2367, forks 713 (observed 2026-08-28T04:06:41.614295+00:00)

## What it is
A shell script that automates injecting a Metasploit backdoor payload into any Android APK by decompiling, hooking smali code, and re-signing the app. It is intended for educational and penetration-testing purposes.

## Use cases
- inject a meterpreter payload into an android apk
- create a backdoored apk for penetration testing
- repackage an apk with a reverse tcp shell
- learn how smali injection into android apps works
- test mobile app security with a trojanized apk

## When to choose
- you need a quick, automated way to embed a Metasploit Android payload into an existing APK
- you are doing authorized red-team or security-training exercises on Android apps
- you want to study smali-level payload injection and obfuscation techniques

## When to avoid
- you need a stealthy, modern evasion tool - the technique is well-known and easily detected
- you require ongoing support or updates - the project is in maintenance with infrequent releases
- you are not comfortable with Linux, Bash, Metasploit, Apktool, and smali
- you intend to use it against devices without explicit authorization - that is illegal

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: penetration-testing, security, reverse-engineering
- domain: security, penetration-testing, android-tools, mobile-development
- platform: cli
- tags: android-apk, metasploit, backdoor-injection, smali, apktool, red-team, offensive-security, shell-script, linux, android

## Member repositories
- dana-at-cp/backdoor-apk (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:41.614295+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:35:57.295884+00:00, confidence not recorded.
  - readme: https://github.com/dana-at-cp/backdoor-apk (fetched 2026-08-28T04:06:41.614295+00:00, sha 2467666658a8)
- Data as of 2026-08-30T08:39:29.467469+00:00.