Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

Commencer

jadx-reverse-engineering

Étoiles15

Forks2

Mis à jour17 juin 2026 à 14:30

Patterns and workflows for using JADX MCP to reverse engineer Android applications.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

warterbili

warterbili/AUTO_REVERSE

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Développeurs de logicielsProfessions informatiques et mathématiques·SOC 15-1252

Explorateur de fichiers

3 fichiers

SKILL.md

readonly

name	jadx-reverse-engineering
description	Patterns and workflows for using JADX MCP to reverse engineer Android applications.

JADX Reverse Engineering Skill

This skill documents effective patterns for navigating and analyzing Android codebases using the JADX MCP server.

Core Workflows

1. Initial Exploration

Step 1: Get AndroidManifest.xml to find the package name and main activities.
- Tool: get_android_manifest()
Step 2: List main application classes.
- Tool: get_main_application_classes_names()
Step 3: Identify key interceptors or entry points (e.g., OkHttp interceptors).
- Tool: search_classes_by_keyword(search_term="Interceptor")

2. Source Analysis

View class source to understand logic.
- Tool: get_class_source(class_name="com.example.TargetClass")
List methods/fields of a class.
- Tools: get_methods_of_class(), get_fields_of_class()

3. Cross-Reference (XRef) Tracing

Trace where a method is called or where a class is instantiated.
- Tools: get_xrefs_to_method(), get_xrefs_to_class()
Find where a field is accessed.
- Tool: get_xrefs_to_field()

4. Handling Obfuscation

Method Discovery: If a class name is known but methods are renamed, list all methods to find the one with matching signature/logic.
Reverse Tracing: If you reach a native boundary, use RegisterNatives hooks in Frida to map obfuscated Java methods to Native offsets.
Object Inspection: Use Frida to dump fields of obfuscated objects (like AppInfo) using reflection.

Example Patterns

Tracing a Header Generation

Find the Interceptor class.
Read the intercept method source.
Identify the helper method calculating the header.
If it's an interface call, use get_xrefs_to_class on the interface to find its implementations.
Locate the native method call.

Best Practices

Pagination: Most listing tools support offset and count. Use them for large codebases.
Absolute Paths: When referencing files in JADX, always use the fully qualified class name.
Combined Analysis: Use JADX MCP to find what is called, and Native analysis (IDA/Frida) to find how it's calculated.

Plus depuis ce dépôt

même dépôt

auto-reverse-orchestrator

warterbili/AUTO_REVERSE

Fully automated reverse-engineering orchestrator. Given a target (Android APK/AAB/XAPK, web URL, or Windows PE), it drives the end-to-end workflow — fingerprinting → planning the analysis chain → static analysis → dynamic analysis → native deep-dive → result synthesis → reproduction & verification — and produces a structured report. This is the entry point of the auto_reverse project, responsible for deciding "which skill/tool to invoke and when, and what to do next once results come back." Trigger scenarios: automated reversing, "reverse this app/website," auto-reverse, fully automated analysis, "here's an APK, run it automatically," "I don't know where to start."

2026-07-1115

js-trace-engine

warterbili/AUTO_REVERSE

Generic dynamic instrumentation / trace engine for heavily-obfuscated anti-bot JavaScript. Takes ANY obfuscated JS, weaves Babel AST probes (function enter/exit, variable assignments, member reads), recursively re-instruments every runtime-generated string (eval / new Function / string setTimeout) so code that only exists after decryption is also traced, runs it bare in a Node harness on top of an env-supplement-proxy environment, and dumps an aggregated execution trace (hot functions, hot variables, dynamic code-gen layers, candidate sign outputs). Ships an L2 anti-detection prelude (clock freeze defeats timing anti-debug; DebuggerStatement stripping; eval/Function toString spoofing). This is the OBSERVATION layer that stacks on top of env-supplement-proxy / node-bridge-build (which make the JS RUN) — it shows HOW the algorithm computes, not just its output. Use when you must understand the internal computation of obfuscated sign/cookie JS, capture runtime-decrypted algorithm code, or produce an execution tr

2026-06-2715

capa-triage

warterbili/AUTO_REVERSE

Use capa (Mandiant) + FLOSS to perform capability triage and string deobfuscation on native libraries (.so / ELF) and executables—before diving into IDA/Ghidra decompilation, automatically identify what capabilities a binary has (crypto/network/anti-debug/anti-analysis/file operations) and recover obfuscated/encoded/stack-built strings (URLs, keys, C2). Trigger scenarios — capa, floss, analyze .so capabilities, identify crypto algorithms, native library capability overview, deobfuscate strings, triage before digging deep.

2026-06-2015

android-re-decompile

warterbili/AUTO_REVERSE

Decompile Android APK, XAPK, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints (Retrofit, OkHttp, Volley), and trace call flows from UI to network layer. Use when the user wants to decompile, analyze, or reverse engineer Android packages, find API endpoints, or follow call flows. Trigger keywords: decompile APK, Android reverse engineering, extract API, analyze Android app, decompile Android, reverse engineering, trace call chain, extract interfaces

2026-06-1815

android-re-fundamentals

warterbili/AUTO_REVERSE

Android reverse-engineering onboarding and fundamentals. Covers device preparation and rooting (unlock bootloader, flash a clean ROM, Magisk root, real-device vs emulator trade-offs), full environment setup (JDK, adb/fastboot, Frida server/tools, Charles/mitmproxy CA certificates), APK internal structure and the forward packaging pipeline, the Android filesystem and partition layout, decompile-and-hook basics, and phone UI automation. Use this when bootstrapping an Android RE workstation, when the user is new to Android reverse engineering, or when they ask how to root a phone, set up Frida/adb/Charles, understand APK/DEX structure, learn the Android filesystem, or automate a device. Trigger keywords — android reverse engineering basics, set up Frida, install adb, root phone, unlock bootloader, flash ROM, Magisk, APK structure, DEX, AndroidManifest, Android filesystem, phone automation, uiautomator2, Charles certificate, JDK install, Android reverse engineering getting started, flashing ROM, root, environment

2026-06-1815

apk-acquire

warterbili/AUTO_REVERSE

Fully automatic APK acquisition for Android reversing. Given a package name, it obtains the APK through the first route that works — pull from a connected adb device, use a local file, or download from APKPure's direct-link endpoint (XAPK with splits or single APK) — then optionally installs it back to a device and verifies the package name. This is Phase 0 (Intake) of the auto_reverse orchestrator: it answers "I don't have the APK yet, get it for me" without manual confirmation. Trigger terms: get the apk, download apk, acquire apk, pull apk, automatic apk acquisition, download apk, install apk, app not installed / not available locally.

2026-06-1815

JADX Reverse Engineering Skill

This skill documents effective patterns for navigating and analyzing Android codebases using the JADX MCP server.

Core Workflows

1. Initial Exploration

Step 1: Get AndroidManifest.xml to find the package name and main activities.

Tool: get_android_manifest()

Step 2: List main application classes.

Tool: get_main_application_classes_names()

Step 3: Identify key interceptors or entry points (e.g., OkHttp interceptors).

Tool: search_classes_by_keyword(search_term="Interceptor")

2. Source Analysis

View class source to understand logic.

Tool: get_class_source(class_name="com.example.TargetClass")

List methods/fields of a class.

Tools: get_methods_of_class(), get_fields_of_class()

3. Cross-Reference (XRef) Tracing

Trace where a method is called or where a class is instantiated.

Tools: get_xrefs_to_method(), get_xrefs_to_class()

Find where a field is accessed.

Tool: get_xrefs_to_field()

4. Handling Obfuscation

Method Discovery: If a class name is known but methods are renamed, list all methods to find the one with matching signature/logic.

Reverse Tracing: If you reach a native boundary, use RegisterNatives hooks in Frida to map obfuscated Java methods to Native offsets.

Object Inspection: Use Frida to dump fields of obfuscated objects (like AppInfo) using reflection.

Example Patterns

Tracing a Header Generation

Find the Interceptor class.

Read the intercept method source.

Identify the helper method calculating the header.

If it's an interface call, use get_xrefs_to_class on the interface to find its implementations.

Locate the native method call.

Best Practices

Pagination: Most listing tools support offset and count. Use them for large codebases.

Absolute Paths: When referencing files in JADX, always use the fully qualified class name.

Combined Analysis: Use JADX MCP to find what is called, and Native analysis (IDA/Frida) to find how it's calculated.