awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
APKLab avatar

APKLab/APKLab

0
View on GitHub↗
3,878 stars·326 forks·TypeScript·AGPL-3.0·24 viewsapklab.surendrajat.xyz↗

APKLab

APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis.

The platform distinguishes itself by combining static and dynamic analysis workflows. It enables the injection of runtime hooks and gadget libraries to monitor application behavior, while providing specialized patching capabilities to intercept and decrypt encrypted network traffic via a proxy.

The toolkit covers a broad range of mobile security capabilities, including malware scanning, vulnerability identification through static pattern-matching, and assembly-level analysis with language server support for Smali navigation. It also automates the management of external binary dependencies and the deployment of compiled binaries to physical devices.

Features

  • Mobile Application Analysis - Combines static and dynamic analysis tools to identify vulnerabilities and malware within mobile applications.
  • Android APK Repackaging Tools - Provides a full toolkit for decompiling, modifying, and rebuilding Android application packages into signed installers.
  • Android Binary Decompilers - Translates Android APK, DEX, and OAT binaries into human-readable source code for analysis.
  • Android Reverse Engineering IDEs - Provides an integrated workbench for decompiling, analyzing, and modifying Android APKs in a single environment.
  • Android Security Testing Frameworks - Offers a comprehensive framework for assessing the security posture of Android apps through malware and vulnerability scanning.
  • Traffic Proxying - Patches application configurations to route and decrypt network traffic through a proxy for security inspection.
  • Binary Disassembly - Decodes application binaries into Smali assembly code for detailed analysis and modification.
  • Binary Decompilation - Translates compiled Android application binaries back into high-level source code or assembly for logic recovery.
  • Dynamic Process Instrumentation - Injects custom code and gadget libraries into running processes to monitor and alter behavior without modifying files on disk.
  • Android Application Reverse Engineering - Analyzes and extracts code from Android applications to recover internal logic and find vulnerabilities.
  • Dynamic Instrumentation Injections - Implements a system for injecting runtime hooks and gadget libraries to intercept and modify Android application behavior.
  • Binary Instrumentation Tools - Implements binary-level modification to embed gadget libraries and alter runtime behavior for security analysis.
  • Mobile Proxy Decryption Patches - Applies patches to Android applications to bypass encryption and intercept secure network traffic via proxies.
  • Smali Language Servers - Provides an LSP-based server for Smali assembly files, enabling reference finding and type hierarchy navigation.
  • Android Debug Bridge Deployments - Pushes compiled binaries to connected Android devices via a debugging bridge for immediate execution.
  • Automated Hook Generation - Automatically generates interception scripts to modify runtime execution and capture data from application methods.
  • Application Proxy Patching - Modifies application configurations to bypass security restrictions and enable traffic inspection via a proxy.
  • Traffic Interceptors - Captures and inspects encrypted network traffic by patching application binaries for proxy visibility.
  • Library Injection - Embeds gadget libraries into binaries and patches activities to extend or modify runtime behavior.
  • Binary Logic Analysis - Analyzes compiled binaries to understand internal execution logic and identify security vulnerabilities.
  • Android Package Signing - Provides automated recalculation of cryptographic signatures for Android packages to ensure they can be installed on physical devices.
  • Binary Signing - Compiles modified source files back into binaries and applies digital signatures for device installation.
  • Malware Analysis Tools - Uses specialized engines to scan Android binaries for malicious behavior and known malware patterns.
  • Security Pattern Matching - Scans binaries against known vulnerability patterns and malicious behavioral signatures using static analysis engines.
  • Encrypted Traffic Analysis - Enables the capture and inspection of plaintext content from encrypted network traffic via binary patching.
  • Development Utilities - Integrated development environment for reverse engineering Android apps.
  • Reverse Engineering Tools - VS Code plugin for streamlined APK analysis.

Star history

Star history chart for apklab/apklabStar history chart for apklab/apklab

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Frequently asked questions

What does apklab/apklab do?

APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis.

What are the main features of apklab/apklab?

The main features of apklab/apklab are: Mobile Application Analysis, Android APK Repackaging Tools, Android Binary Decompilers, Android Reverse Engineering IDEs, Android Security Testing Frameworks, Traffic Proxying, Binary Disassembly, Binary Decompilation.

Which projects share features with apklab/apklab?

Projects with overlapping indexed features include: ax/apk.sh — apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom… charles2gan/gda-android-reversing-tool — This project is a comprehensive Android reverse engineering suite that functions as a decompiler, bytecode… shroudedcode/apk-mitm — apk-mitm is a command-line utility designed to modify Android APK files to enable HTTPS traffic inspection via a… credittone/hooker — Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It… firerpa/lamda — This project is an Android RPA framework designed for automating user interfaces and system tasks on rooted Android… vaibhavpandeyvpz/apkstudio — Apkstudio is a reverse engineering integrated development environment designed for decompiling, modifying, and…

Projects sharing features with APKLab

These projects share indexed features with APKLab. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • ax/apk.shax avatar

    ax/apk.sh

    3,795View on GitHub↗

    apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom instrumentation and logic into compiled Android binaries. It serves as a workflow manager for modifying application packages without requiring access to the original source code. The toolkit focuses on automating the process of injecting the Frida gadget into Android packages, enabling dynamic analysis and function hooking on non-rooted devices. It handles the end-to-end lifecycle of deconstructing, modifying, and resigning binaries to facilitate security research, malware analysis, and be

    Shellandroidandroid-reverse-engineeringapk
    View on GitHub↗3,795
  • charles2gan/gda-android-reversing-toolcharles2gan avatar

    charles2gan/GDA-android-reversing-Tool

    4,778View on GitHub↗

    This project is a comprehensive Android reverse engineering suite that functions as a decompiler, bytecode deobfuscator, and malware analysis tool. It is designed to convert APK, DEX, and OAT binaries into human-readable source code using a native implementation that does not require a Java Virtual Machine. The platform is distinguished by its integration with Frida for dynamic analysis, allowing users to hook methods, inject custom JavaScript, and dump device memory in real time. It also features specialized security engines, including a taint propagation engine and a stack-state machine, to

    Pythondecompilermalware-analysismobile-security
    View on GitHub↗4,778
  • shroudedcode/apk-mitmshroudedcode avatar

    shroudedcode/apk-mitm

    5,036View on GitHub↗

    apk-mitm is a command-line utility designed to modify Android APK files to enable HTTPS traffic inspection via a proxy. It functions as a network security patcher and certificate pinning bypass tool, automating the process of altering application packages to allow man-in-the-middle traffic analysis. The tool modifies compiled Android packages by unpacking them, altering internal files, and re-encoding the binary. It specifically focuses on disabling certificate pinning and injecting network security configurations into the application manifest, which permits the use of proxy certificates on b

    TypeScript
    View on GitHub↗5,036
  • credittone/hookerCreditTone avatar

    CreditTone/hooker

    5,195View on GitHub↗

    Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It functions as a reverse engineering framework that uses Frida to inject scripts into running processes, monitor native calls, and extract executable DEX files. The project provides specialized utilities for bypassing security controls, including tools to disable SSL certificate validation and BoringSSL pinning to enable HTTPS traffic interception. It includes capabilities for detecting application packing, extracting cryptographic keys by hooking encryption algorithms, and circum

    JavaScriptandroidapkboringssl
    View on GitHub↗5,195
Compare all 30 related projects→