● مجتمع
SimoneAvogadro
⚡ فوري
Android Reverse Engineering Skill
بواسطة SimoneAvogadro · SimoneAvogadro/android-reverse-engineering-skill
Claude Code skill for Android APK reverse engineering — apktool, jadx, Frida workflows.
A skill bundle that teaches Claude how to do real Android reverse engineering: unpack APKs, decompile to Java with jadx, patch smali, hook with Frida. It chains the right tools instead of one-shotting jadx and giving up.
لماذا تستخدمه
الميزات الأساسية
- End-to-end workflow: pull APK → unpack → decompile → search → patch → repack → sign
- Frida script scaffolding for runtime hooks
- Smali patching with checksum-safe repack
- Built-in checklists for common targets (cert pinning, root detection)
- Pairs with a
bin/ toolchain bootstrap
عرض مباشر
كيف يبدو في الممارسة
android-reverse-engineering-skill.replay
▶ جاهز
حالات الاستخدام
استخدامات عملية: Android Reverse Engineering Skill
متى تستخدمه: You need to inspect a Flutter/OkHttp app's traffic and pinning blocks Burp.
المتطلبات الأساسية
- Server/skill installed and authenticated — See repo README
الخطوات
-
Identify pinning
Decompile target.apk and find all references to TrustManager / CertificatePinner / Flutter's HttpClient.✓ تم النسخ
→ List of hooks to patch
-
Patch + Frida
Generate a Frida script that no-ops checkServerTrusted across both Java and Flutter paths.✓ تم النسخ
→ Frida .js + run command
النتيجة: Working MITM channel on a test target you own.
المزالق
- Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization. — Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization.
التكلفة والحدود
تكلفة التشغيل
- حصة API
- See provider docs for rate limits
- الرموز لكل استدعاء
- Varies by tool
- التكلفة المالية
- See repo README for pricing details
- نصيحة
- Cache tool results and avoid repeated identical calls.
الأمان
الصلاحيات والأسرار ونطاق الأثر
تخزين بيانات الاعتماد: Use environment variables; never commit secrets
نقل البيانات الخارجي: Tool calls go to the provider's API as documented
استكشاف الأخطاء
الأخطاء الشائعة وحلولها
apktool fails to unpack
Use the latest apktool (≥2.9). Older versions miss new resource tables.
تحقق: apktool --version ≥ 2.9
repack signs but won't install
Use uber-apk-signer with --allow-resign and target the right SDK level.
تحقق: adb install -r app-signed.apk
البدائل
Android Reverse Engineering Skill مقابل البدائل
| البديل | متى تستخدمها | المقايضة |
|---|
| trailofbits/skills | You want broader security skills | More generic; less Android-specific |