Setup: Androl4b

1. Download Androl4b from https://github.com/sh4hin/Androl4b
2. Combine the downloaded archives using 7zip https://askubuntu.com/questions/134227/how-to-extract-files-from-a-split-7zip-archive
3. Import Androl4b.ova into VirtualBox.
4. Start the Androl4b Virtual Machine.
5. Login using the following credentials: andro/andro

6. Start android emulator

   • Click on the "Emulator" desktop icon.
   • Enter 1234 as the lock screen password.

7. Setup a vulnerable app Android-InsecureBankv2

   • Start AndroLab server by running following commands in a terminal:

     $ cd /home/andro/Desktop/Labs/Android-InsecureBankv2/AndroLabServer/
     $ wget https://raw.githubusercontent.com/dineshshetty/Android-InsecureBankv2/master/AndroLabServer/requirements.txt
     $ pip install -r requirements.txt
     $ python app.py
     

   • Start a new terminal and run following commands to install the vulnerable mobile app into the android emulator:

     $ cd /home/andro/Desktop/Labs/Android-InsecureBankv2
     $ adb install InsecureBankv2.apk
     

8. Start hacking!