> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/android-manifest.md).

# Android Manifest

### 01. Introduction

An android application APK is provided in the lab. Use [apktool](https://github.com/iBotPeaches/Apktool) to extract the package, Analyze the AndroidManifest.xml and answer the following questions:

1. What is the name of the application?
2. What is the version of the SDK on which this app was compiled?
3. How many permission elements are present in the file?
4. Is it possible to take a backup of this application via ADB?
5. The application has a service. Can this service be invoked by the components of other applications?

{% file src="/files/tja6yCXvH1n10zuiDy1Q" %}

### 02. Answers

To extract the APK file I'll use the following command:

```
apktool d sample-video-player.apk
```

<div align="left"><img src="https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MfT0VPyK6X13Egd9pzy%2Fuploads%2FHxFmM72FklREKqDgy8K1%2Fapktool01.png?alt=media&amp;token=fd799c1a-673e-428b-b700-93865a74f332" alt=""></div>

You can now view the <mark style="color:green;">AndroidManifest.xml</mark> with an editor of your choice:

![](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MfT0VPyK6X13Egd9pzy%2Fuploads%2FKxqJKDQTkx2eyWuOzSzk%2Fmanifest01.png?alt=media\&token=1c100be0-a7a6-4d63-9325-f98f5ee15eed)

1. package name is vlc
2. SdkVersion is 23
3. 18 permission elements
4. android:AllowBackup is not defined
5. no, because android:exported is set to false

![](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MfT0VPyK6X13Egd9pzy%2Fuploads%2Fr6znZCV2fK4Di11YlV2A%2Fmanifest02.png?alt=media\&token=db5cd29a-fb38-42de-877e-971bfb1d5e37)