New fragment "InstallApk.java" required

[Re4son]

Hi jmingov,

Would you be able to help out with the new apk installation routine for Android versions Oreo and above?
The installer checks for the Android SDK version and if it is >= 26 it installs the nethunter-app as system app and copies all other apks to "/sdcard/nh_files/cache/apk".
We need a fragment that kinda runs the following during the first start of the nethunter app:

for file in /sdcard/nh_files/cache/apk/*.apk; do
   pm install $file
   rm -f $file
done

Are you able to use your magic to put something together in the 2019.2-dev branch?
Installing all apps will take a long time and a status display would be the icing on the cake.

Thanks heaps,
Re4son

[jmingov]

Hey :)

Ill try to take a look at this in the next few days.

@Re4son,

1. Should this be run during the first start of the nethunter app? Yes
2. Should run again when the chroot is updated/uninstalled/...?
3. Will the user need to run this later again at some point?

Best
J

[Re4son]

Awesome. Thanks heaps!

1. Should this be run during the first start of the nethunter app? Yes
2. Should run again when the chroot is updated/uninstalled/...? No
3. Will the user need to run this later again at some point? No

@PaulSec,
Any idea how we can install apps from the google store at the same time, e.g. DriveDroid and the WHID Injector app?

The nethunter-app is installed as priv-app in android >=Oreo which gets rid of the 7 confirmation prompts on initial launch.
Any reasons not to do it the same way for older version too? We can then look at a standard way of updating the app.

I'm going to raise dedicated issues for the other questions I have.

Many thanks,
Re4son

[PaulSec]

Mmh.. I might miss something (sorry for that :)) but I guess the easiest way would be to sign my apps on my own and let you know as soon as I have an update (eg. for the Shodan app for example)

I know that some people don't want to download from the Play Store and don't want to be tied with Google. That's why I thought about releasing an APK itself and people could download it on their own (but signed by myself).

What are your thoughts on this?

[Re4son]

Good point.