apk-redteam-pipeline

Android APK red team automation covers acquisition, decompilation, secret discovery, and runtime instrumentation. This Skill streamlines the penetration testing workflow by orchestrating these phases to identify vulnerabilities like hardcoded credentials and component enumeration flaws.

Using Frida for runtime instrumentation allows you to bypass certificate pinning and trace API calls dynamically. The Skill integrates Frida to hook into the running Android application, enabling real-time interception of network communications and function execution.

Yes, jadx and frida are required dependencies for decompiling APKs and performing runtime instrumentation. You must also have objection and mitmproxy installed to fully execute the automated secret discovery and component enumeration features.

Enumerating exported components for intent injection vulnerabilities is best handled by automated component enumeration. The Skill analyzes the decompiled APK source to identify exposed components, helping penetration testers map potential attack surfaces efficiently.

Fetching APKs from the Play Store, APKPure, and APKMirror is supported during the acquisition phase. This allows security researchers to automatically retrieve target applications before initiating decompilation and vulnerability analysis.

Extracting hardcoded URLs, credentials, and JWT tokens is performed during the secret discovery phase. The Skill parses the decompiled source code generated by jadx to locate and report sensitive information left inside the application bundle.