What problem does it solve?
This Skill eliminates the manual, time-intensive work of reverse engineering Android APKs during authorized offensive security engagements, enabling teams to quickly extract sensitive embedded data and identify mobile-specific attack surface without deep specialized reverse engineering expertise.
Core Features & Use Cases
- Automated APK Acquisition: Pull APKs from Play Store developer pages, APKPure, and APKMirror with fallback options for XAPK split packages and truncated downloads.
- Static Analysis & Secret Extraction: Decompile DEX files with jadx and run 60+ high-signal greps to find hardcoded JWTs, cloud credentials, internal API endpoints, and misconfigured Firebase instances.
- Runtime & Attack Surface Testing: Enumerate exported Android components for intent injection risks, bypass certificate pinning with Frida, capture network traffic via mitmproxy, and test for mobile-specific vulnerabilities.
- Use Case: For an authorized red team engagement where a target's customer-facing Android app is in scope, use this Skill to quickly pull the latest APK, extract 30+ internal API endpoints and an expired JWT from the decompiled code, and test for intent injection vulnerabilities in exported activities.
Quick Start
Use the apk-redteam-pipeline skill to perform end-to-end static and runtime analysis of the target's in-scope Android mobile app to extract secrets, enumerate attack surface, and identify mobile-specific vulnerabilities.
