skills.rest
cybersecwoman
cybersecwomanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

apk-redteam-pipeline

Automate Android APK red-team analysis with decompilation, secret extraction, and component enumeration.

5|Updated May 27, 2026
Search Tags:#security#android#vulnerability analysis#apk#redteam
One-click install
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill apk-redteam-pipeline-cybersecwoman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: apk-redteam-pipeline
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/apk-redteam-pipeline
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill apk-redteam-pipeline-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jadx, 7zip, frida-tools, objection, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of red-team analysis on Android APKs, including acquisition, decompilation, secret extraction, and component enumeration, to help identify vulnerabilities in mobile applications.

Core Features & Use Cases

  • APK Acquisition: Fetches APKs from Play Store, APKPure, and APKMirror.
  • Decompilation: Decompile APKs using jadx to extract code and resources.
  • Secret Extraction: Searches for secrets like credentials, URLs, and JWTs.
  • Component Enumeration: Lists exported components and checks for potential intent-injection vulnerabilities.
  • Use Case: Ideal for security professionals performing mobile application assessments.

Quick Start

To start the APK red-team analysis pipeline, run the following command: /agent bughunter hunt apk-redteam-pipeline

Frequently Asked Questions about apk-redteam-pipeline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Android APK red-team analysis and vulnerability extraction?▼

Android APK red-team analysis is automated by acquiring APKs, decompiling code with jadx, extracting hardcoded secrets, enumerating components, and running Frida instrumentation to identify mobile application vulnerabilities.

What is the best way to decompile an APK and search for hardcoded secrets?▼

Decompiling an APK and searching for secrets is handled by using jadx to extract source code and resources, then performing automated grep operations to locate exposed credentials, URLs, and JWTs.

Do I need jadx and frida-tools installed to perform APK component enumeration and runtime instrumentation?▼

Yes, you need jadx and frida-tools installed, along with 7zip and objection, to execute the full pipeline covering decompilation, component enumeration, and Frida runtime instrumentation.

Can I fetch APKs directly from the Play Store and APKMirror for security assessments?▼

Fetching APKs for security assessments is supported directly from the Play Store, APKPure, and APKMirror, enabling automated acquisition before decompilation and vulnerability analysis begins.

How does Frida runtime instrumentation detect intent-injection vulnerabilities in exported components?▼

Frida runtime instrumentation detects intent-injection vulnerabilities by dynamically hooking exported components identified during enumeration, allowing runtime traffic capture and behavioral analysis of the mobile application.

What are the limitations of using automated decompilation for Android vulnerability analysis?▼

Automated decompilation for Android vulnerability analysis is limited by obfuscated code structures and anti-debugging protections, which can hinder jadx extraction and Frida instrumentation on certain mobile applications.

Related Skills

Explore More Software Engineering Skills→
SkobynSkobyn

apk-redteam-pipeline

Automate Android APK red-team analysis with decompilation, secret detection, and Firebase inspection.

Community
Advanced
0xhaaz0xhaaz

mobile-pentest

Decompile Android and iOS apps to identify security vulnerabilities.

Community
Advanced
DragonJARDragonJAR
330

Android-Pentesting-Skill

Analyze Android APKs for security vulnerabilities and generate bypass scripts.

Community
Advanced
riandeoliveirariandeoliveira

performing-web-application-penetration-test

Perform OWASP WSTG-aligned web application penetration testing with Burp Suite.

Community
Advanced