Automate Android and iOS app reverse engineering with static and dynamic analysis.
npx skills add https://github.com/Xerrion/opencode --skill rev-mobile
Please help me install this Agent Skill. Skill: rev-mobile Source: https://github.com/Xerrion/opencode/tree/main/skills/rev-mobile Command: npx skills add https://github.com/Xerrion/opencode --skill rev-mobile
Mobile reverse engineering across Android and iOS requires coordinated static and dynamic analysis, toolchains, and artifact generation. This skill provides structured workflows to analyze apps from APKs/IPAs to Frida instrumentation and to produce organized outputs under .rev.
Begin by applying the Android static workflow to a sample.apk and then perform Frida-based dynamic analysis to generate the .rev outputs.
High-intent search queries and answers about installing and using this skill.
Mobile app reverse engineering is automated by orchestrating static and dynamic analysis workflows. The process unpacks APKs and IPAs, decompiles code, inspects manifests, and instruments runtime behavior to generate structured artifacts under a .rev directory.
Static analysis of an APK requires apktool for unpacking, jadx for decompilation, and androguard for inspection. These tools extract the AndroidManifest.xml, network security configs, dex files, assets, and native libraries for review.
Yes, SSL pinning and root or jailbreak checks can be bypassed using Frida and objection. These dynamic analysis tools enable runtime instrumentation to intercept network traffic and bypass security restrictions on Android and iOS.
To extract class information from an iOS IPA, use class-dump for header extraction and IPSW tooling for handling. Provisioning profiles and entitlements are reviewed to prepare notes for downstream disassembly in tools like Ghidra.
Decompiled app artifacts are organized systematically under a .rev directory. This structure separates decompiled source code and disassembly outputs, keeping manifests, entitlements, and debug information accessible for audit or research.
Yes, the workflow supports malware analysis by providing structured static and dynamic inspection. Security researchers can assess malicious app behavior through decompiled artifacts and runtime observation using Frida instrumentation.
brucesongsAnalyze Android and iOS apps for security risks using static and dynamic testing.
XerrionAnalyze binaries via deterministic static reverse engineering across native, managed, JavaScript, and WebAssembly targets.
YukiIto1999Identify iOS app security weaknesses using Frida and Objection.
EntroVyxAutomate Android APK security analysis through acquisition, decompilation, and runtime instrumentation.
