billing-hack/README.md

Billing Hack

This application allows to impersonate the Google Play Billing service (com.android.vending).

This is a version of Techbrunch/Billing-Hack that has a built artefact and nothing changed. Techbrunch/Billing-Hack by itself is an updated version of Billing Hack by @domschuermann

How to use

1. Install Billing Hack
2. Patch the vulnerable application to use Billing Hack instead of the Google Play Billing service
3. Patch the vulnerable application performing the signature validation
4. Install the modified application in your device.

References

• 2013 - Google Play In-App Billing Library Hacked
• 2017 - AbusingAndroid In-appBillingfeaturethanksto a misunderstoodintegration
• 2018 - Get Freebies by Abusing the Android InApp Billing API
• 2020 - Contournement de l'API Google Play Billing