Useful commands

All the following commands are integrated in HacknDroid.

ADB shell

adb shell

On a specific device ID:

adb shell devices

adb shell -s <device_serial_number>

The option -s <device_serial_number> can be added to every ADB command.

APK from AAB

java -jar bundletool.jar build-apks --bundle=<aab_file> --output=<output_path>.apks --ks=<keystore_path>.jks --ks-pass=pass:<keystore_password> --ks-key-alias=<key_alias> --key-pass=pass:<key_password>

App data

Retrieve app data (storage):

adb shell
su root
cp -r /data/data/<app_id> /sdcard/temp
chmod 666 /sdcard/temp
exit

adb pull /sdcard/temp <local_path>

Reset app data

adb shell pm clear <app_id>

App Information

If the APK file was decompiled, look at AndroidManifest.xml.

Otherwise:

aapt dump badging <apk_path>

Backup

Create a backup

Description

Command

All the applications

adb backup -apk -f -shared -all <backup_name>.ab

Specific Application

adb backup -apk -f <backup_name>.ab <app_id>

The device will ask you to insert a <password> that you are going to use in the following command to create a TAR archive from the AB file.

java -jar abe.jar unpack <backup_name>.ab <backup_name>.tar <password>

The you can extract the TAR file as you want.

Restore a backup

adb restore <backup_name>.ab

Compile APK

java -jar apktool.jar b <code_folder> -o <compiled_apk_filepath>
zipalign -v 4 <compiled_apk_filepath> <zipaligned_apk_filepath>

The next step is the signing of the apk.

Connectivity & Battery

Option

Command

Airplane Mode ON

adb shell settings put global airplane_mode_on 1

Airplane Mode OFF

adb shell settings put global airplane_mode_on 0

Battery Status

adb shell dumpsys battery

Network information

adb shell dumpsys connectivity

Wifi OFF

adb shell svc wifi disable

Wifi ON

adb shell svc wifi enable

Wifi Settings

adb shell am start -a android.settings.WIFI_SETTINGS

CPU information

adb shell cat /proc/cpuinfo

Decompile APK

java -jar apktool.jar d <apk_filepath> -o <destination_folder>

Device information

adb shell getprop <property>

Property

Description

ro.product.model

Device Model

ro.product.brand

Brand

ro.product.manufacturer

Manufacturer

ro.build.version.release

Android Version

ro.build.id

Build ID

ro.build.version.sdk

SDK Version

ro.build.date

Build Date

ro.serialno

Device Serial Number

External storage

adb shell 'echo $EXTERNAL_STORAGE'

File transfer

From mobile device to PC:

adb pull <mobile_path> <local_path>

From PC to mobile device:

adb push <local_path> <mobile_path>

Install/Uninstall application

Uninstall an application from the mobile device:

adb uninstall <app_id>

Install from the APK file path:

adb install <path.apk>

Open the Play Store page of a specific application:

adb shell am start -a android.intent.action.VIEW -d "market://details?id=<app_id>"

Example:

adb shell am start -a android.intent.action.VIEW -d "market://details?id=com.mcdonalds.mobileapp"

Keystore creation

keytool -genkeypair -v -keystore <keystore_path>.jks -alias <my_app_alias> -keyalg RSA -keysize 2048 -validity 10000 -storepass "my_secure_password" -keypass "my_secure_password" -dname "CN=John Doe, OU=Development, O=MyCompany, L=New York, ST=NY, C=US"

Launch an application

adb shell monkey -p <app_id> -v <num_pseudo_random_events>

Example:

adb shell monkey -p com.example.app -v 1

List applications on the mobile device

Description

Command

All the applications

adb shell pm list packages

Running applications

adb shell "ps -A | awk '{print $9}'"

System applications

adb shell pm list packages -s

3rd-party applications

adb shell pm list packages -3

Logs

Retrieve the PID of the application

adb shell pidof <app_id>

Action

Command

Default logs

adb logcat --pid=<pid>

Crash logs

adb logcat --pid=<pid> *:E

Memory dump

adb shell dumpsys meminfo <app_id>

Merge APK

java -jar apkeditor.jar m -f -i <dir_with_apks> -o <merged_apk_name>.apk

Mirroring

On default command port (27183)

scrcpy

If errors on binding like the following Open

mirror on a different port:
```
scrcpy --port=<port>
```
or restart Host Network Service (HNS) if on Windows and then run scrcpy:
```
net stop hns
net start hns
scrcpy
```

Owner UID of the application

adb shell "pm list packages -U | grep <app_id> | cut -d: -f3"

Package name from the Owner UID of the application

adb shell "pm list packages -U | grep <owner_uid> | cut -d: -f2 | cut -d' ' -f1"

Print APK certificates information

apksigner verify --print-certs <apk_filepath>

RAM information

adb shell cat /proc/meminfo

Reboot/Shutdown

Action

Command

Reboot the device

adb reboot

Reboot the device into bootloader/fastboot mode

adb reboot bootloader

Reboot the device into recovery mode

adb reboot recovery

Shutdown the device

adb shell reboot -p

Screen recording

adb shell screenrecord /sdcard/video.mp4

Screenshot

adb shell screencap -p /sdcard/screenshot.png

Sign APK

apksigner sign --ks <keystore_file> --ks-pass pass:<keystore_password> --key-pass pass:<key_password> --v1-signing-enabled true --v2-signing-enabled true <apk_path>

Stop an application

adb shell am force-stop <app_id>

Storage info

adb shell df

Verify APK signature

apksigner verify --verbose <apk_filepath>

PreviousSMALI NextOSINT

Last updated 23 days ago