apk

• stands for android package
• it is zip file
• sontains source code & other imporatnt files
• key components of an APK file
  • AndroidManigest.xml
    • all permissions
    • list all the activities, services, broadcast receivers and content providers
  • Classes.dex
    • it contains java bytecode in DEX (Dalvik Exchange)
  • resources.arsc
    • contains compiled resource in binary format
  • res
    • Contains device configurations, bitmaps and layouts
  • META-INF

unpack apk

apktool d app.apk

convert dex to jar

d2j-dex2jar classes.dex

open jar in IDE

jd-gui classes-dex2jar.jar &

mobile-security-fremework-mobsf

docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest