androidReverse v20
New releaseAug 27, 2026Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Ja 2026-8-27 00:1:16 Author: kitploit.com(查看原文) 阅读量:4 收藏

New releaseAug 27, 2026

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

Platform Architecture Status

Download

A reverse engineering suite that runs entirely on Android. No PC, no ADB, no desktop tools — everything from APK extraction to native binary analysis happens on-device.


MCP Server

androidReverse includes a built-in Model Context Protocol server, allowing MCP-compatible AI clients to connect and interact with the tool directly.


Java Decompilation

Eight engines selectable per-class with a single tap:

EngineNotes
CFRHandles most modern obfuscation well
ProcyonGood with generics and lambdas
JD-CoreFast, lightweight
KrakatauBytecode-level accuracy
VineflowerFernflower fork, strong on control flow
JadxPrimary engine
Jadx FallbackActivates automatically on Jadx failure
Jadx IRRaw intermediate representations

Native Binary Analysis

Powered by an embedded Radare2 engine via JNI.

  • Control Flow Graphs (CFG): Interactive draggable node canvas with pinch-to-zoom, built on Compose Canvas
  • Call Graph & Xref Tracing: Depth-adjustable graphs for incoming/outgoing calls and field read/write references
  • Multi-mode output: Switch between Pseudo-C decompilation, raw assembly, and hex dumps
  • Block Inspector: Assembly instructions with memory addresses and execution heuristics
  • Binary Info Panel: Executable metadata at a glance
  • Function Rename & Comments: Annotate binary functions directly within the decompiler

APK & Resource Handling

  • Universal extraction: .apk, .xapk, and split .apks — from storage or installed apps
  • Hardened AXML decoding: Reflection-backed AXMLPrinter that bypasses modern manifest obfuscation
  • Deep ARSC parsing: Navigate resource tables, string pools, and XML attribute mappings in a unified tree view

  • Jump-to-definition: Navigate directly to class and method definitions from Smali registers
  • Class Structure Compass: Filter and jump to methods or fields within large classes
  • Smart Smali Explainer: Select any block of Smali lines and get an instant plain-language explanation of what the code does

Cross-Platform App Support

  • Flutter: Dart AOT analysis via Unflutter
  • Unity: Native il2cpp metadata parsing and function recovery

Code Editor

Built on Sora Editor with TextMate grammar pipelines and Darcula theme. Syntax highlighting for Java, Smali, ARM assembly, C, and hex.


Built-in Utilities

Data Converter — On-the-fly encoding/decoding with no external tools:

Base64 · Hex ↔ Decimal · Hex ↔ Text · URL Encode/Decode · Unicode Escape · XOR Cipher · Color Hex Preview

Global Notebook — Persistent notes across sessions. Track offsets, document findings, save snippets.

Class Bookmarking — Pin critical classes for fast access during long sessions.

Deep Memory Search — Regex-supported search across Smali, class names, and native binary patterns simultaneously.


Screenshots


Known Limitations

  • Code editing and APK recompilation are not yet available. This release focuses on analysis and inspection.

Disclaimer

For educational purposes and security research on applications where you have explicit permission from the author. The developer assumes no liability for misuse.


Credits

  • Sora Editor — mobile code editor
  • radare2 — native binary analysis engine
  • CFR, Procyon, JD-Core, Krakatau, Vineflower, Jadx — Java decompiler engines

Read more

Categories


文章来源: https://kitploit.com/en/posts/github-ultrasina-androidreverse-v20
如有侵权请联系:admin#unsafe.sh