jpype apksigner PoC

jpype-apksigner.py

import sys

import jpype
import jpype.imports

jpype.startJVM(classpath=["/usr/share/java/org.jpype.jar", "/usr/share/java/apksigner.jar"])

from com.android.apksig import ApkVerifier
from java.io import File

builder = ApkVerifier.Builder(File(sys.argv[1]))
verifier = builder.build()
result = verifier.verify()

if result.isVerified():
    if result.isVerifiedUsingV1Scheme():
        print("v1 verified")
    if result.isVerifiedUsingV2Scheme():
        print("v2 verified")
    if result.isVerifiedUsingV3Scheme():
        print("v3 verified")
else:
    print("not verified")
    for error in result.getErrors():
        print("ERROR:", error)
    sys.exit(1)