skills.rest
hardw00t
hardw00tCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

android-pentest

Automate Android app pentesting with static APK analysis and Frida instrumentation.

90|14|Updated Jan 12, 2026
Search Tags:#mcp#android#frida#apk#pentest#security-testing
One-click install
npx skills add https://github.com/hardw00t/ai-security-arsenal --skill android-pentest
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: android-pentest
Source: https://github.com/hardw00t/ai-security-arsenal/tree/main/skills/android-pentest
Command: npx skills add https://github.com/hardw00t/ai-security-arsenal --skill android-pentest

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill consolidates Android security assessment workflows, enabling automatic coordination of static APK analysis, dynamic instrumentation with Frida/Objection, runtime manipulation, traffic interception, and vulnerability discovery across rooted devices and emulators.

Core Features & Use Cases

  • Static & Dynamic Analysis: APK inspection, decompilation, and instrumentation for security testing.
  • Runtime Manipulation & Traffic Interception: Bypass SSL pinning, defeat basic root checks, configure proxies, and monitor network traffic.
  • Use Case: Given an Android app, run a full security assessment from reconnaissance to reporting using MCP tool sequences and prebuilt Frida scripts; export findings and evidence.

Quick Start

  1. Connect a rooted Android device or emulator with ADB and Frida server running.
  2. Use Claude Code MCP commands to pull APK, enumerate components, attach Frida scripts, and orchestrate dynamic analysis.
  3. Capture network traffic, collect evidence, and generate a formal security assessment report.

Frequently Asked Questions about android-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Android APK pentesting and dynamic instrumentation?▼

Automate Android APK pentesting by using MCP tool sequences to coordinate static APK analysis, attach Frida scripts for dynamic instrumentation, and orchestrate runtime manipulation across rooted devices and emulators.

What do I need to set up before running Android security testing with Frida?▼

Android security testing with Frida requires a rooted Android device or emulator, ADB connectivity, and a running Frida server to successfully execute dynamic instrumentation and traffic interception workflows.

Can I bypass SSL pinning and root checks during Android app pentesting?▼

Bypass SSL pinning and defeat basic root checks during Android app pentesting by applying prebuilt Frida scripts and Objection runtime manipulation techniques through coordinated MCP commands.

How to capture network traffic and generate security assessment reports for Android apps?▼

Capture network traffic and generate security assessment reports for Android apps by configuring proxies, monitoring network traffic via MCP tools, and exporting collected evidence and vulnerability findings.

Does this Android pentesting approach work on both rooted devices and emulators?▼

Android pentesting workflows apply to both rooted physical devices and emulators, requiring ADB and Frida server configuration to execute static analysis, dynamic instrumentation, and traffic interception uniformly.

What is the best way to coordinate static and dynamic Android app analysis?▼

Coordinate static and dynamic Android app analysis by leveraging MCP server commands to pull APKs, enumerate components, attach Frida scripts, and seamlessly transition from reconnaissance to exploitation.

Related Skills

Explore More Software Engineering Skills→
FilenCloudDiensteFilenCloudDienste
34

argent-android-emulator-setup

Boot an Android AVD and prepare device connectivity for UI automation.

Official
Intermediate
narlyseorgnarlyseorg
6

writing-security-reports

Document security findings into formal reports with CVSS scoring and remediation guidance.

Community
Advanced
alexfazioalexfazio
159

cc-trace

Intercept and inspect Claude Code API traffic using mitmproxy.

Community
Advanced
grivera82grivera82

apk-redteam-pipeline

Automate APK acquisition, jadx decompilation, and artifact discovery for Android red-team engagements.

Community
Advanced