[MASTG-TOOL-0103] add uber-apk-signer (#2782)

* add uber-apk-signer * Apply suggestions from code review Co-authored-by: Jeroen Beckers <[email protected]> --------- Co-authored-by: Jeroen Beckers <[email protected]>
OWASP · Jul 13, 2024 · 0f99f13 · 0f99f13
1 parent eab8800
commit 0f99f13
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/tools/android/MASTG-TOOL-0103.md b/tools/android/MASTG-TOOL-0103.md
@@ -0,0 +1,19 @@
+---
+title: uber-apk-signer
+platform: android
+source: https://github.com/patrickfav/uber-apk-signer
+---
+
+A tool that helps to sign, [zip align](https://developer.android.com/studio/command-line/zipalign.html) and verify one or more Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2, [v3](https://source.android.com/security/apksigning/v3) and [v4](https://source.android.com/security/apksigning/v4) Android signing schemes. Easy and convenient debug signing with embedded debug keystore. Automatically verifies signature and zip alignment after signing.
+
+Download the jar from the [latest release](https://github.com/patrickfav/uber-apk-signer/releases/latest) and run:
+
+```bash
+$ java -jar uber-apk-signer.jar --apks </path/to/apks>
+```
+
+Demo:
+
+[![asciicast](https://asciinema.org/a/91092.png)](https://asciinema.org/a/91092)
+
+For more information go to the [GitHub repository](https://github.com/patrickfav/uber-apk-signer).