The compiled exploit. You can install it with adb install SSPwn.apk.
Sources are available under SSPwn. The APK installed by the exploit is at SSPwn/app/src/main/res/raw/app_to_push.apk.
Script used to copy the v2 signature from one APK to another. Read the blog post for more details.
You can run it with:
python3 graft_sig.py source.apk target.apk