apk-redteam-pipeline

Automate Android APK red-team analysis from acquisition to decompilation and secret discovery.

Updated Jun 5, 2026

Search Tags:#grep #red-team #jadx #apk #apk-analysis #exported-components #secret-discovery

Ready to run

npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill apk-redteam-pipeline-sseshachala

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: apk-redteam-pipeline
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/apk-redteam-pipeline
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill apk-redteam-pipeline-sseshachala

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

End-to-end Android APK red-team workflow that automates acquisition, decompilation, and targeted data discovery to reveal hardcoded secrets, internal endpoints, and exported components across mobile apps.

Core Features & Use Cases

Automated APK acquisition from Play Store, APK hosting sources, and leaked URLs.
Jadx-based decompilation and quick strings/grep-based scanning for secrets (JWTs, API keys, Firebase configs).
Exported-component enumeration and runtime instrumentation templates to map attack surface for post-exploitation planning.

Quick Start

Run the APK-redteam-pipeline against a target's APK catalog or discovered APK URLs and follow prompts to decompile, grep for secrets, and enumerate exported components.

Frequently Asked Questions about apk-redteam-pipeline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate Android APK analysis for hardcoded secrets and exported components?▼

Android APK red-team analysis automates acquisition from Play Store or leaked URLs, decompiles with jadx, and uses grep to discover hardcoded secrets like JWTs and Firebase configs while enumerating exported components.

What is the best way to discover Firebase configurations and API keys in an APK?▼

The best way to discover Firebase configurations and API keys in an APK is by decompiling the application with jadx and applying string and regex grep scanning against the decompiled source code.

Can I use jadx and grep tooling for end-to-end APK red-team engagements?▼

Yes, jadx and grep tooling support end-to-end APK red-team engagements by decompiling Android apps, scanning for targeted data discovery, and mapping attack surfaces for post-exploitation planning.

How do I acquire an APK from a Play Store developer page or leaked URL for decompilation?▼

You can acquire an APK for decompilation by automating the acquisition workflow from Play Store developer pages, direct APK downloads, or leaked URLs before running the analysis pipeline.

Does APK red-team analysis include runtime instrumentation templates for post-exploitation?▼

Yes, APK red-team analysis includes Frida templates for runtime instrumentation, allowing you to map the application attack surface and plan post-exploitation actions against exported components.

What are the limitations of using grep for secret discovery in decompiled APKs?▼

Using grep for secret discovery in decompiled APKs is limited to static string and regex matching, meaning it requires access to raw APK sources and cannot detect dynamically loaded or obfuscated secrets.