Skip to content


  • stands for android package
  • it is zip file
  • sontains source code & other imporatnt files
  • key components of an APK file
    • AndroidManigest.xml
      • all permissions
      • list all the activities, services, broadcast receivers and content providers
    • Classes.dex
      • it contains java bytecode in DEX (Dalvik Exchange)
    • resources.arsc
      • contains compiled resource in binary format
    • res
      • Contains device configurations, bitmaps and layouts
    • META-INF

unpack apk

apktool d app.apk

convert dex to jar

d2j-dex2jar classes.dex

open jar in IDE

jd-gui classes-dex2jar.jar &


docker run -it --rm -p 8000:8000 opensecurity/mobile-security-framework-mobsf:latest