ax/apk.sh
Apk.sh
apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom instrumentation and logic into compiled Android binaries. It serves as a workflow manager for modifying application packages without requiring access to the original source code.
The toolkit focuses on automating the process of injecting the Frida gadget into Android packages, enabling dynamic analysis and function hooking on non-rooted devices. It handles the end-to-end lifecycle of deconstructing, modifying, and resigning binaries to facilitate security research, malware analysis, and behavioral testing.
The project covers several core capability areas, including bytecode manipulation, resource decoding, and package management. It provides utilities to pull application files from devices, modify package identifiers, and recompute cryptographic signatures to ensure modified packages remain installable on target operating systems.
Features
- Frida-Based Instrumentation - Patches Android packages to load the Frida gadget for dynamic instrumentation on non-rooted devices.
- Resource-Aware Decompilation - Extracts and reconstructs binary structures to preserve functional integrity during modification and repackaging.
- Android APK Repackaging Tools - Provides a framework for decompiling, modifying, and rebuilding Android application packages for security research.
- Android APK Signers - Applies digital signatures to modified APKs so the Android operating system accepts them for installation.
- Android App Rebuilding - Compiles decoded resources and modified bytecode back into a functional binary APK or JAR file.
- Android Patching Utilities - Provides automated utilities for patching Android application packages to integrate custom logic and instrumentation.
- Patching Frameworks - Acts as a workflow manager for injecting custom instrumentation and logic into compiled Android binaries.
- Android Resource Decoding - Converts compiled binary resources and bytecode from APK files into human-readable formats for analysis.
- Mobile Patching Frameworks - Implements a framework for applying code transformations and instrumentation to compiled mobile applications.
- Library Injection - Inserts shared objects into application binaries to enable runtime instrumentation and behavioral monitoring.
- Android Application Reverse Engineering - Facilitates the analysis and extraction of code from Android applications to understand internal logic without source code.
- Android Package Signing - Recomputes cryptographic signatures after binary modification to ensure the package remains valid and installable.
- Package Signing - Computes cryptographic signatures for modified archives to ensure security compliance and OS compatibility.
- Application Binary Patching - Streamlines the repetitive workflow of decompiling, patching, and rebuilding software binaries.
- Bytecode Manipulation - Modifies compiled application instructions directly to inject custom logic without requiring access to source code.
- Bytecode Patching - Provides capabilities to modify compiled Android binaries to inject custom logic without original source code access.
- Instrumentation Toolkits - Provides a collection of scripts to inject libraries and modify bytecode for observing application behavior.
- APK Extraction Utilities - Extracts APKs from connected devices and merges split bundles into a single file for patching.
- Application Instrumentation - Inserts custom libraries into mobile applications at startup to enable monitoring and script execution.
- Application Package Management - Automates the downloading, unpacking, and resigning of Android application packages.
- Manifest Instrumentation - Programmatically updates application configuration files to trigger the execution of custom instrumentation libraries during startup.
- Android Security Tools - Includes automated scripts for modifying and reassembling packages to facilitate behavioral testing and auditing.
- APK Signers - Recomputes cryptographic signatures to ensure modified Android packages remain installable on target devices.
- Startup Instrumentation - Updates application configuration files to load instrumentation agents before the application starts.
- Workflow Orchestration Scripts - Coordinates sequential command-line operations to automate the lifecycle of downloading, unpacking, patching, and rebuilding packages.
- Android Security Auditors - Analyzes Android binary behavior through bytecode manipulation and security auditing in controlled environments.
- Malware Analysis - Allows deconstruction of suspicious Android packages to inspect bytecode and observe behavior for malware analysis.
- Mobile App Security Auditing - Enables security auditing of Android binaries by injecting custom monitoring tools to test resilience against modifications.
