● Comunidad
SimoneAvogadro
⚡ Instantáneo
Android Reverse Engineering Skill
por SimoneAvogadro · SimoneAvogadro/android-reverse-engineering-skill
Claude Code skill for Android APK reverse engineering — apktool, jadx, Frida workflows.
A skill bundle that teaches Claude how to do real Android reverse engineering: unpack APKs, decompile to Java with jadx, patch smali, hook with Frida. It chains the right tools instead of one-shotting jadx and giving up.
Por qué usarlo
Características clave
- End-to-end workflow: pull APK → unpack → decompile → search → patch → repack → sign
- Frida script scaffolding for runtime hooks
- Smali patching with checksum-safe repack
- Built-in checklists for common targets (cert pinning, root detection)
- Pairs with a
bin/ toolchain bootstrap
Demo en vivo
Cómo se ve en la práctica
android-reverse-engineering-skill.replay
▶ listo
Casos de uso
Usos del mundo real: Android Reverse Engineering Skill
Cuándo usarlo: You need to inspect a Flutter/OkHttp app's traffic and pinning blocks Burp.
Requisitos previos
- Server/skill installed and authenticated — See repo README
Flujo
-
Identify pinning
Decompile target.apk and find all references to TrustManager / CertificatePinner / Flutter's HttpClient.✓ Copiado
→ List of hooks to patch
-
Patch + Frida
Generate a Frida script that no-ops checkServerTrusted across both Java and Flutter paths.✓ Copiado
→ Frida .js + run command
Resultado: Working MITM channel on a test target you own.
Errores comunes
- Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization. — Reversing apps you don't have rights to is illegal in most jurisdictions. The skill assumes you've documented authorization.
Coste y límites
Lo que cuesta ejecutarlo
- Cuota de API
- See provider docs for rate limits
- Tokens por llamada
- Varies by tool
- Monetario
- See repo README for pricing details
- Consejo
- Cache tool results and avoid repeated identical calls.
Seguridad
Permisos, secretos, alcance
Almacenamiento de credenciales: Use environment variables; never commit secrets
Salida de datos: Tool calls go to the provider's API as documented
Resolución de problemas
Errores comunes y soluciones
apktool fails to unpack
Use the latest apktool (≥2.9). Older versions miss new resource tables.
Verificar: apktool --version ≥ 2.9
repack signs but won't install
Use uber-apk-signer with --allow-resign and target the right SDK level.
Verificar: adb install -r app-signed.apk
Alternativas
Android Reverse Engineering Skill vs otros
| Alternativa | Cuándo usarla | Contrapartida |
|---|
| trailofbits/skills | You want broader security skills | More generic; less Android-specific |