Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/muellerberndt/apkx
One-Step APK Decompilation With Multiple Backends
https://github.com/muellerberndt/apkx
Last synced: 2 days ago
JSON representation
One-Step APK Decompilation With Multiple Backends
- Host: GitHub
- URL: https://github.com/muellerberndt/apkx
- Owner: muellerberndt
- Created: 2017-04-23T07:09:00.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2021-01-19T06:11:07.000Z (about 4 years ago)
- Last Synced: 2024-08-04T16:05:42.224Z (6 months ago)
- Language: Python
- Size: 5.7 MB
- Stars: 243
- Watchers: 12
- Forks: 39
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- android-security-awesome - One Step Decompiler - Android APK Decompilation for the Lazy (Tools / Static Analysis Tools)
- awesome-rainmana - muellerberndt/apkx - One-Step APK Decompilation With Multiple Backends (Python)
README
# apkx - Android APK Decompilation for the Lazy
A Python wrapper to popular free dex converters and Java decompilers. Extracts Java source code directly from the APK. Useful for experimenting with different converters/decompilers without having to worry about classpath settings and command line args.
## Installation
```bash
$ git clone https://github.com/b-mueller/apkx
$ cd apkx
$ sudo ./install.sh
```
Notes:
- JRE needs to be installed and in PATH
- enjarify requires Python 3
## Usage
Pass the APK filename on the command line:
```bash
$ apkx HelloWorld.apk
Extracting HelloWord.apk to HelloWord
Converting: classes.dex -> classes.jar (dex2jar)
dex2jar HelloWord/classes.dex -> HelloWord/classes.jar
Decompiling to HelloWord/src (cfr)
```
The default combination of converter and decompiler is dex2jar and cfr. Use the -c and -d flags to change this. E.g.:
```bash
$ apkx -c enjarify -d procyon HelloWorld.apk
```
To get help, run:
```bash
$ apkx -h
```
## Tools
This script integrates the following tools:
- [Procyon](https://bitbucket.org/mstrobel/procyon) by Mike Strobel - [Apache License Version 2.0](https://www.apache.org/licenses/LICENSE-2.0.html)
- [CFR](http://www.benf.org/other/cfr/) by Lee Benfield - [MIT License](https://opensource.org/licenses/MIT)
- [dex2jar](https://github.com/pxb1988/dex2jar) by Bob Pan - [Apache License Version 2.0](https://www.apache.org/licenses/LICENSE-2.0.html)
- [enjarify](https://github.com/Storyyeller/enjarify) by Storyyeller - [Apache License Version 2.0](https://www.apache.org/licenses/LICENSE-2.0.html)
## About
This script accompanies the [OWASP Mobile Security Testing Guide](https://github.com/OWASP/owasp-mstg). For further instructions and usage examples, see also:
- [Tampering and Reverse Engineering on Android](https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05c-Reverse-Engineering-and-Tampering.md)
- [Testing Resiliency Against Reverse Engineering on Android](https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md)