[Connected Car] donaldta:
Btw, Spotify is system app, so they cannot uninstall it. They'd have to use "-r" to install the trojan package in /data/app.

All of these had incompatible certificates.

C:\>adb install apk\Masterkey\spot1.apk
101 KB/s (3260310 bytes in 31.259s)
pkg: /data/local/tmp/spot1.apk
Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES]

C:\>adb install apk\Masterkey\spot2.apk
126 KB/s (3248006 bytes in 25.125s)
pkg: /data/local/tmp/spot2.apk
Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES]

C:\>adb install apk\Masterkey\spot4.apk
252 KB/s (2812177 bytes in 10.887s)
pkg: /data/local/tmp/spot4.apk
Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES]

C:\>adb install apk\Masterkey\spot5.apk
94 KB/s (3256414 bytes in 33.572s)
pkg: /data/local/tmp/spot5.apk
Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES]

C:\>

This one installed...

C:\>adb install apk\Masterkey\spot3.apk
128 KB/s (4926618 bytes in 37.467s)
pkg: /data/local/tmp/spot3.apk
Success

C:\>adb uninstall com.alephzain.framaroot
Success

...however, it forced closed upon launch.

110-31 06:34:04.587: I/ActivityManager(62): Starting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.alephzain.framaroot/.FramaActivity } from pid 161
10-31 06:34:04.986: I/ActivityManager(62): Start proc com.alephzain.framaroot for activity com.alephzain.framaroot/.FramaActivity: pid=26464 uid=10039 gids={1006}
10-31 06:34:07.195: D/dalvikvm(26464): Trying to load lib /data/data/com.alephzain.framaroot/lib/libspotify.so 0x405148a8
10-31 06:34:07.276: D/dalvikvm(26464): Added shared lib /data/data/com.alephzain.framaroot/lib/libspotify.so 0x405148a8
10-31 06:34:07.276: D/dalvikvm(26464): No JNI_OnLoad found in /data/data/com.alephzain.framaroot/lib/libspotify.so 0x405148a8, skipping init
10-31 06:34:07.525: W/dalvikvm(26464): No implementation found for native Lcom/alephzain/framaroot/FramaActivity;.Check ()[Ljava/lang/String;
10-31 06:34:07.525: D/AndroidRuntime(26464): Shutting down VM
10-31 06:34:07.535: W/dalvikvm(26464): threadid=1: thread exiting with uncaught exception (group=0x40015560)
10-31 06:34:07.626: E/AndroidRuntime(26464): FATAL EXCEPTION: main
10-31 06:34:07.626: E/AndroidRuntime(26464): java.lang.UnsatisfiedLinkError: Check
10-31 06:34:07.626: E/AndroidRuntime(26464):	at com.alephzain.framaroot.FramaActivity.Check(Native Method)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at com.alephzain.framaroot.FramaActivity.onCreate(FramaActivity.java:23)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1047)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1611)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:1663)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.app.ActivityThread.access$1500(ActivityThread.java:117)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.app.ActivityThread$H.handleMessage(ActivityThread.java:931)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.os.Handler.dispatchMessage(Handler.java:99)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.os.Looper.loop(Looper.java:123)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at android.app.ActivityThread.main(ActivityThread.java:3683)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at java.lang.reflect.Method.invokeNative(Native Method)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at java.lang.reflect.Method.invoke(Method.java:507)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:839)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:597)
10-31 06:34:07.626: E/AndroidRuntime(26464):	at dalvik.system.NativeStart.main(Native Method)

Launching though Activity Manager did not error out at ADB...

C:\>adb shell am start -n com.alep
hzain.framaroot/com.alephzain.framaroot.FramaAdbActivity --es exploit Gimli --ei
action 0
Starting: Intent { cmp=com.alephzain.framaroot/.FramaAdbActivity (has extras) }

C:\>

However, it forced closed on the device.

10-31 06:49:25.146: I/ActivityManager(62): Start proc com.alephzain.framaroot for activity com.alephzain.framaroot/.FramaAdbActivity: pid=27637 uid=10039 gids={1006}
10-31 06:49:25.206: I/dalvikvm(27628): JNI: AttachCurrentThread (from ???.???)
10-31 06:49:25.206: I/AndroidRuntime(27628): NOTE: attach of thread 'Binder Thread #3' failed
10-31 06:49:26.135: D/dalvikvm(27637): Trying to load lib /data/data/com.alephzain.framaroot/lib/libspotify.so 0x40514b88
10-31 06:49:26.155: D/dalvikvm(27637): Added shared lib /data/data/com.alephzain.framaroot/lib/libspotify.so 0x40514b88
10-31 06:49:26.155: D/dalvikvm(27637): No JNI_OnLoad found in /data/data/com.alephzain.framaroot/lib/libspotify.so 0x40514b88, skipping init
10-31 06:49:26.166: W/dalvikvm(27637): No implementation found for native Lcom/alephzain/framaroot/FramaAdbActivity;.Check ()[Ljava/lang/String;
10-31 06:49:26.166: D/AndroidRuntime(27637): Shutting down VM
10-31 06:49:26.166: W/dalvikvm(27637): threadid=1: thread exiting with uncaught exception (group=0x40015560)
10-31 06:49:26.175: E/AndroidRuntime(27637): FATAL EXCEPTION: main
10-31 06:49:26.175: E/AndroidRuntime(27637): java.lang.UnsatisfiedLinkError: Check
10-31 06:49:26.175: E/AndroidRuntime(27637):	at com.alephzain.framaroot.FramaAdbActivity.Check(Native Method)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at com.alephzain.framaroot.FramaAdbActivity.onCreate(FramaAdbActivity.java:15)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1047)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1611)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:1663)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.app.ActivityThread.access$1500(ActivityThread.java:117)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.app.ActivityThread$H.handleMessage(ActivityThread.java:931)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.os.Handler.dispatchMessage(Handler.java:99)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.os.Looper.loop(Looper.java:123)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at android.app.ActivityThread.main(ActivityThread.java:3683)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at java.lang.reflect.Method.invokeNative(Native Method)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at java.lang.reflect.Method.invoke(Method.java:507)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:839)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:597)
10-31 06:49:26.175: E/AndroidRuntime(27637):	at dalvik.system.NativeStart.main(Native Method)
10-31 06:49:26.185: W/ActivityManager(62): Force finishing activity com.alephzain.framaroot/.FramaAdbActivity
10-31 06:49:26.706: W/ActivityManager(62): Activity pause timeout for HistoryRecord{407c64a8 com.alephzain.framaroot/.FramaAdbActivity}
10-31 06:49:37.548: W/ActivityManager(62): Activity destroy timeout for HistoryRecord{407c64a8 com.alephzain.framaroot/.FramaAdbActivity}

The way I see it there are three syntax errors

Failure [INSTALL_PARSE_FAILED_INCONSISTENT_CERTIFICATES]

This is typically due to mismatched certificates from one already on the system and the one being installed.

Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES]

This is typically due to the Android Device not acknowledging the package's certificates.

Failure [INSTALL_FAILED_INVALID_APK]

I believe this is due to the system's zip handler (libz.so) unable to handle APK.