JADX Reviews and Details

Is JADX good?

Social recommendations and mentions

• Java Decompiler

  More modern choice would be [jadx](https://github.com/skylot/jadx) or [Vineflower](https://github.com/Vineflower/vineflower). Or if you want to paid, [JEB](https://www.pnfsoftware.com/). - Source: Hacker News / 8 months ago

• Ask HN: How can I recover and run my old mobile game from the 2010s?

  If you do find an .apk and didn't obfuscate it with proguard (I can't remember if proguard ran default in the release pipeline in Eclipse ADT...which...ew) you can use jadx to decompile your .apk and recover the structure of your source code! https://github.com/skylot/jadx. - Source: Hacker News / 11 months ago

• I hacked my washing machine

  First up: this isn't criticism of the original post in the slightest, it's a wonderful journey through figuring out how a weird device that wants to be on your wifi works. If you have a device that speaks to an Android app, you want https://github.com/niklashigi/apk-mitm will turn an apk into something that approximates Java, and digging through that will often let you figure out what the key is. But some vendors... - Source: Hacker News / 12 months ago

• Debugging an Undebuggable App

  > I remember something like dex2jar also, which gave you a jar you could use in any java decompiler, like jdgui, procyon etc. https://github.com/skylot/jadx is very handy for that nowadays. It also supports interactive variable/method/class name renaming to make the decomplied code easier to read. The decompiler isn't perfect, but I guess all available Java decompilers... - Source: Hacker News / over 1 year ago

• Hunting the Hacker: A Deep Dive into Courier Fraud

  Suspicious of the request, our colleague forwarded the APK to me, knowing my expertise in software development and cybersecurity. My investigation began by downloading and extracting the contents of the APK. Inside, I found several dex files, which I knew contained the app's compiled source code. Using a tool called jadx, (jadx -d extractedapkfile) I decompiled the APK to inspect its source code. - Source: dev.to / about 2 years ago

• A popular Bluetooth car battery monitor that siphons up all your location data

  The best way is to just start practicing. I would say pick some simple apps on your (Android) phone and dig straight in. The great thing about Android applications is that often they generally decompile quite nice into human readable Java soo the barrier of entry can be quite low to start reversing. Grab a copy of JADX[1] - it will decompress and decompile the APK files. If you don't have an Android handset, use... - Source: Hacker News / about 3 years ago

• Hardware Question

  This may be overkill but you can use an oscilloscope to manually calculate the baudrate, i.e. Like this. It looks like it could be UART serial data, but this is a good resource to reference. Sometimes http is used as a means for communicating, and not necessarily directly to a browser see here. This is pretty common in embedded applications actually. You can try using dirbuster to see what hidden endpoints there... Source: about 3 years ago

• improved nintype

  Jadx - skylot/jadx: Dex to Java decompiler (github.com) - Used for decompiling the apk - make the code readable. Source: about 3 years ago

• How to securely set end point url and encryption keys in CN1 app

  I realized when app is decompiled using JADX class names are recreated as shown in this screenshot of sample app. Source: about 3 years ago

• Reverse Engineering the Facebook Messenger API

  Not sure. I started reverse engineering Java apps very early in my life — initially it was J2ME games. Decompilers of the time sucked but that didn't stop me from modding Gravity Defied :P I honestly don't know what's a good way of getting started on reverse engineering. There's a bunch of everything about Windows executables in particular, including "crackmes", but native machine code is a level up from JVM... - Source: Hacker News / over 3 years ago

• What Happens When Your Phone Is Spying on You

  A week ago I purchased a bluetooth device that takes some measurements. You require an Android or iOS application. The first thing the iOS app did was request permission for your location. Immediate fired up MITMproxy [1] running in transparent `--mode wireguard` and installed it's certificate in the iOS trust store. It was sending a whole bunch of data to China and HK. Since I don't have a jailbroken iPhone, it's... - Source: Hacker News / over 3 years ago

• Any legit cracking tutorial?

  Jadx: View the generated Java code for an app. This tool tries to recreate Java code from the smali bytecode, but keep in mind that sometimes it may not work because Java -> Smali conversion is not fully backwards compatible. Source: over 3 years ago

• Apk.sh is a Bash script that makes reverse engineering Android apps easier

  If you haven't tried Jadx [1], give it a shot. It's by far the easiest way to reverse Android APKs. I doesn't do patching or reassembly, but I used it for reversing the Delong'hi APK for longshot [2][3] and the quality of output was fantastic. [1] https://github.com/skylot/jadx [3] https://grack.com/blog/2022/12/02/hacking-bluetooth-to-brew-coffee-on-github-actions-part-2/. - Source: Hacker News / over 3 years ago

• Potentially OT: Any guides/crash course/cheatsheet on how to modify or perhaps reverse engineer an open source program to your preference?

  Smali is a low level language for Dalvik bytecode and it can be quite a headache to interpret it correctly and achieve what you want. That's why I recommend another tool called jadx which can mostly recover Java code from a dex file, but unfortunately the conversion is not 100% possible. Also, editing is not possible with jadx. Source: over 3 years ago

• Is Jetpack Compose ready for production development?

  I've also been doing some sleuthing myself — I want to figure out if there are other companies out there using Jetpack Compose. To do that I downloaded the apk binaries from Spotify, TikTok, Uber Eats, WhatsApp, Reddit and decompile them with jadx. - Source: dev.to / over 3 years ago

• [How To] Get All Built-in Variables in Tasker

  JADX - (Get JADX here, for this tutorial I'm using the GUI interface). Source: almost 4 years ago

• [Project Share] Debug Tools

  Debug Built-in variables is my favorite, I came across this post that teaches how to extract all built-in variables using the getClassLoader() method, but the Class referenced by the Author is no longer available. So, I decide to extract the Tasker .apk using adb, and did some search using JADX and I found the variables under this class: net.dinglisch.android.taskerm.gm and d as the declared field. After that, a... Source: almost 4 years ago

• Is there a way to decompile and rebundle an android bundle?

  If you don't use Proguard then you can use jadx to decompile the APK (download it from APKPURE or any other sideloaded apk website). Source: almost 4 years ago

• A technical analysis of Pegasus for Android – Part 1

  You'd probably have much better decompilation using a dedicated Android decompiler: https://github.com/skylot/jadx. Source: almost 4 years ago

• Can anyone recommend a good tool to pentest mobile apps?, I have the packages locally. Thanks

  I can say only for android: - General Scanner -> https://github.com/MobSF/Mobile-Security-Framework-MobSF - Decompiler -> https://github.com/skylot/jadx. Source: about 4 years ago

• how to modify tiktok app

  You can also decompile the code to java with https://github.com/skylot/jadx. Source: about 4 years ago