Lab Resources

Reference builds used in mobile security research. Both files are Android packages (.apk). Verify SHA-256 before installing.

Calculator Open Source

A clean open-source calculator from the F-Droid ecosystem. No special network permissions beyond standard app functionality.

Package com.darkempire78.opencalculator

Version 3.1.4

Size 2.35 MB

SHA-256 e8a2305969e7bef86859b7203b4cd0699f39133350c40fea81a63768d5831471

Permissions VIBRATE, SYSTEM_ALERT_WINDOW, USE_FULL_SCREEN_INTENT

An Android Meterpreter com.metasploit.stage payload used in authorized penetration tests. Installs a remote access shell on the target device.

Package com.metasploit.stage

Version 1.0

Size 10 KB

SHA-256 1639cf5dc62d18c1c6f09c26e3a379d4c5346bcc7544e1bc5e89c95e81fcaf5e

Permissions INTERNET, ACCESS_WIFI_STATE, CHANGE_WIFI_STATE, ACCESS_NETWORK_STATE, ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION, READ_PHONE_STATE

Only download and install on devices you own or have written authorization to test.
Verify the SHA-256 checksum above against what you receive — do not run a tampered file.
Side-loading APKs requires Android to allow installs from unknown sources for the browser you use.
Installation of the Metasploit payload grants remote control of the device. Remove it immediately after testing.