Torhoo onion mirror : torhoocc3yugradvhrppml2fin4xob7kgg7uf42s4xk7p6r5vzy62ead.onion

Private key for apk : hacking | Torhoo darknet markets

Hi, is someone who has private key used for signing an apk on playstore? or do you have any idea how to obtain one?

/u/Demure

1 points

3 weeks ago

You should have gotten from start, check .jks
You can always create using Android studio

/u/workerbee

0 points

3 weeks ago

You can generate your own and sign an APK with it. Having another app's private key for signing would only be useful for that particular app (or updates to that app) or maybe for pushing updates of that app onto play store.

Can you explain what your goal is? Feel free to DM if you want. I can tell you how to generate a key for yourself. Using keytool and jarsigner. Some apps check for keys but there are ways around that, some take a significant amount of time to work around and may not be worth the trouble. Others don't check at all. What's your goal?

/u/lazycatty711 📢

1 points

3 weeks ago

if i get an app from playstore and modify it for example, i want to be able to sign it again as if it s the original app. idk if i made myself clear or if it s possible to do that

/u/workerbee

1 points

3 weeks ago

Yes that is possible but it depends on the app. Some are very easy, some are very hard. Some of them use C libs (file.so) to check the signatures and compare things. Other apps have no protection in place at all and you can modify it and sign it with any key. Every app is different.

You can use tools like MT Manager and it will automatically attempt to inject the existing signature back into the manifest and bypass. It has a few options if you pay for premium. You may benefit more from watching YouTube videos on bypassing APK signatures.

Apps like Snapchat use sophisticated techniques throughout but with enough time and patience, you can get around that too. There's actually a project on GitHub that has a modded Snapchat already available. If you modify that python, you can modify and sign. It extracts a valid signature from the original APK and injects it into the modded apk. It may disable the lib.so or add another one that does more, I can't remember.

Each app is different. I use apktool d app.apk

Then I do my modifications and apktool b folder_name. Then use keytool and jarsigner to sign the apktool output'd folder you just made with apktool b and it signs it. If you open the app and it fails right away, there's some type of protection in place.

DM the name of the app you're trying to modify. Even in 2025, a lot of random apps aren't using signature checks. But most of all the big name apps are and you'll need a good understanding of java, smali and following things backwards