Automate Android APK acquisition, decompilation, and secret grep workflows.
npx skills add https://github.com/chatbotkit/rook --skill apk-redteam-pipeline
Please help me install this Agent Skill. Skill: apk-redteam-pipeline Source: https://github.com/chatbotkit/rook/tree/main/skills/apk-redteam-pipeline Command: npx skills add https://github.com/chatbotkit/rook --skill apk-redteam-pipeline
End-to-end Android APK red-team pipeline automates acquisition from multiple sources, decompilation, secret/URL/JWT/Firebase grep, certificate analysis, and exported component enumeration to map a mobile application's security surface quickly.
Initiate the apk-redteam-pipeline against your target apps in scope to automatically acquire, decompile, grep secrets, and enumerate components.
High-intent search queries and answers about installing and using this skill.
Android APK red-team workflows can be fully automated from acquisition to secret extraction by acquiring target apps from sources like the Play Store, decompiling DEX files with jadx, and running automated grep routines to locate hardcoded credentials, URLs, and JWT tokens.
Yes, Frida runtime instrumentation templates can be applied for dynamic analysis and runtime testing after the static APK decompilation phase reveals code paths, exported components, and pinned certificates.
Mapping an Android app's security surface is best achieved by automating exported component enumeration and inspecting Firebase or Cloud configuration files during the red-team pipeline's analysis phase to identify potential attack vectors.
Yes, the pipeline supports automated APK acquisition from the Play Store, apkpure, and apkmirror, utilizing a fallback mechanism to ensure target apps are successfully retrieved when specific sources are unavailable.
Pinned-certificate extraction is performed automatically during the APK analysis pipeline alongside manifest inspection and secret grep workflows to identify network security configurations and potential certificate bypass opportunities.
Yes, jadx is a required decompilation tool for this pipeline, utilized to reverse DEX files into readable code paths and embedded secrets during the Android APK red-team workflow.
sseshachalaAutomate Android APK red-team analysis from acquisition to decompilation and secret discovery.
bpnrockstarAutomate Android APK red-team operations including decompilation, secret discovery, and Frida instrumentation.
grivera82Automate APK acquisition, jadx decompilation, and artifact discovery for Android red-team engagements.
uphiagoAutomate Android APK reverse engineering and red team analysis pipelines.
