https://github.com/yaron4u/pi-android-re
Android RE skills for Pi coding agent - static (decompile/API extraction) + dynamic (Frida hooking/bypass)
https://github.com/yaron4u/pi-android-re
frida jadx pi pi-mono reverse-engineering skills
Last synced: about 1 month ago
JSON representation
Android RE skills for Pi coding agent - static (decompile/API extraction) + dynamic (Frida hooking/bypass)
- Host: GitHub
- URL: https://github.com/yaron4u/pi-android-re
- Owner: yaron4u
- License: apache-2.0
- Created: 2026-05-03T09:12:06.000Z (about 2 months ago)
- Default Branch: main
- Last Pushed: 2026-05-06T21:01:16.000Z (about 2 months ago)
- Last Synced: 2026-05-06T22:36:40.492Z (about 2 months ago)
- Topics: frida, jadx, pi, pi-mono, reverse-engineering, skills
- Language: JavaScript
- Homepage:
- Size: 169 KB
- Stars: 7
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Agents: AGENTS.md
Awesome Lists containing this project
README
# pi-android-re
Android reverse engineering skills for the [Pi coding agent](https://pi.dev). Static analysis (decompilation, API extraction, call flow tracing) and dynamic analysis (Frida hooking, SSL pinning bypass, root detection bypass, anti-instrumentation evasion).
## Prerequisites
- [Pi coding agent](https://pi.dev) installed (`npm install -g @mariozechner/pi-coding-agent`)
- [Context7 MCP](https://github.com/upstash/context7) configured in `~/.pi/agent/settings.json` (recommended for API signature verification)
## Install
```bash
git clone https://github.com/yaron4u/pi-android-re.git
cd pi-android-re
bash install.sh
```
The installer copies skills, prompts, and AGENTS.md into `~/.pi/agent/` and creates `apk-*` CLI wrappers in `~/.local/bin/`.
## Usage
### Mode Selection
Launch Pi and type:
| Command | Mode |
| ---------- | ------------------------------------------------------------------ |
| `/static` | Static analysis -- decompile APKs, extract APIs, trace call flows |
| `/dynamic` | Dynamic analysis -- Frida hooking, runtime bypass, instrumentation |
Pi also auto-detects the mode from your message. Say "decompile this APK" and it loads static. Say "write a Frida hook" and it loads dynamic.
### Static Analysis
The 5-phase workflow: **Dependencies -> Decompile -> Analyze Structure -> Trace Call Flows -> Extract APIs**.
```bash
apk-check-deps # verify environment
apk-install-dep java # install missing deps
apk-decompile app.apk # decompile with jadx (default)
apk-decompile --engine both --deobf app.apk # both engines + deobfuscation
apk-find-apis output/sources/ --retrofit # extract Retrofit endpoints
```
### Dynamic Analysis (Frida)
Covers:
- Root detection bypass (RootBeer, custom checks, System.exit)
- SSL pinning bypass (SSLContext, OkHttp, Conscrypt, TrustKit)
- Anti-Frida evasion (strstr, /proc/self/maps, port scanning)
- Biometric bypass (BiometricPrompt, FingerprintManager)
- Crypto monitoring (Cipher, SecretKey)
- Native instrumentation (Interceptor, pattern scanning, CModule)
## File Structure
```
pi-android-re/
AGENTS.md # Global persona + mode selector
install.sh # One-command installer
prompts/
static.md # /static prompt template
dynamic.md # /dynamic prompt template
skills/
android-static-analysis/
SKILL.md # 5-phase decompilation workflow
scripts/
check-deps.sh # Verify Java, jadx, vineflower, dex2jar
install-dep.sh # Auto-install missing dependencies
decompile.sh # Decompile APK/XAPK/JAR/AAR
find-api-calls.sh # Extract API endpoints from sources
references/
setup-guide.md # Dependency installation guide
jadx-usage.md # jadx CLI reference
fernflower-usage.md # Fernflower/Vineflower reference
api-extraction-patterns.md # Grep patterns for API discovery
call-flow-analysis.md # Call flow tracing techniques
android-dynamic-analysis/
SKILL.md # Frida coding standards + examples
```
## Static Analysis Dependencies
Required: **Java JDK 17+**, **jadx**
Optional (recommended): **Vineflower/Fernflower**, **dex2jar**, **apktool**, **adb**
Run `apk-check-deps` after install to see what's missing. Use `apk-install-dep ` to install.
## Credits
- Static analysis scripts adapted from [SimoneAvogadro/android-reverse-engineering-skill](https://github.com/SimoneAvogadro/android-reverse-engineering-skill) (Apache 2.0)
- Static analysis scripts adapted from [rsenet/FriList](https://github.com/rsenet/FriList) (GPLv3)
- Dynamic analysis standards based on production Frida workflows
## License
Apache 2.0