Master Key multi-fix app icon

Master Key multi-fix

Voidv Apps · tungstwenty.xposed.masterkeydualfix

4.7 out of 5 (3 ratings) 1.8K downloads v2.0 29.3 KB Android 2.3.3+ PEGI 3 · Everyone

At a glance

Latest version
v2.0 (6)
Updated
Nov 6, 2013 (12 years ago)
APK size
29.3 KB
Requires
Android 2.3.3+ (API 10)
CPU support
Any (no native code)
Category
Tools (app)
Website
forum.xda-developers.com/showthread.php?t%3D2365294
Developer contact
[email protected]

About this APK

Master Key multi-fix is an app by Voidv Apps in the Tools category. It has no native code, so it runs on any Android processor.

Description

From the listing uploaded by “merlin35”.

Requires theXposed Framework. Grab it athttp://forum.xda-developers.com/showthread.php?t=1574401and make sure it runs properly on your device.ROOTonly required for installing the Xposed Framework, it can be dropped afterwards. This app patches severalvulnerability issuesfound on Android collectively known as 'Master Key' exploits: - bug 8219321 - bug 9695860 - bug 9950697 In general terms, these allow exploiting signed APKs by replacing the code they contain while maintaining the existing signature valid (hence the term 'Master Key'), leading you to think the original author is someone you trust. The original Android sources have been corrected to fix these problems, but it might take a while till stock ROMs include the fixes, if ever. To check if you're vulnerable, you can use other apps available on the store such as SRT AppScanner (https://play.google.com/store/apps/details?id=de.backessrt.appintegrity) or Bluebox Security Scanner (https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner).Note: If using Bluebox Security Scanner, make sure to force a refresh on the app once the fix is applied, otherwise you might get a cached and incorrect result. For any questions or to support my work, please visithttp://forum.xda-developers.com/showthread.php?t=2365294

Security & authenticity

Security rating: Trusted

Signing certificate

  • Certificate issued to “Unknown” The developer's name — though anyone can put any name in a certificate.

Store checks and file details

  • Developer signature verified Feb 16, 2016
  • Antivirus scan passed Nov 17, 2020
  • Signed byCN=Tungstwenty, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=PT
  • Signing certificate (SHA-1)AB:19:48:64:17:9E:96:49:C7:02:73:B8:41:4B:33:3A:7E:0C:48:24
  • File MD5d06bd0c69a81b5006c85a1961a741186
  • Uploaded by “merlin35” 40 followers · uploading since 2013

Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures. AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.

Required hardware & features

Master Key multi-fix APK: questions and answers

Can I install this APK over the version I already have?

Only if it is signed with the same certificate as the copy on your phone and isn't an older version. If Android says “App not installed”, the certificates differ; uninstalling your copy first works but deletes its data unless it is backed up.

Is the Master Key multi-fix APK safe?

No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. After downloading, check that the file's MD5 is d06bd0c69a81b5006c85a1961a741186.

Tags

More Tools apps