Top Ad unit 728 × 90

Extract Android apk from Market and Decompile it to Java Source

This post talks about process of extracting apk file of any app available in market and then decompiling it to Java source. This can be helpful for those who perform code review (for security vulnerabilities) on apps whose source code is not available. Once Java source code is obtained, we can either do manual code review or run any free/commercial automated code scanners.

Download .apk file from market

  1. Search in market for the app you want to decompile and install it on your phone.
  2. Install Astro File Manager from market (link). Open Astro > Tools > Application Manager/Backup and select the application to backup on to the SD card .
  3. Mount phone as USB drive and access '\backups\apps\' folder to find the apk of target app (lets call it targetapp.apk) . Copy it to your local drive.

Decomiling apk to Dex format

  1. Download Dex2Jar (link) (Android runs applications which are in Dalvik Executable (.dex) format).
  2. Run the command to convert apk to jar
dex2jar targetapp.apk file(./dex2jar targetapp.apk on terminal)
File ‘targetapp.apk.dex2jar.jar’ is created
Converting Apk (Dex) to Jar

Viewing/Decompiling the Jar files to Java

Method 1 : Use JavaDecompiler (JD)

  1. Open ‘targetapp.apk.dex2jar.jar’ with jd-gui (link)
  2. File > Save All Sources to sava the class files in jar to java files.
JD GUI Viewer

Method 2: JAD

  1. Extract contents of jar file on to a folder named src. Use and unarchival utility like 7zip
  2. Keep ‘src’ folder in the same directory where JAD and targetapp jar is present
  3. Open JAD in cmd and execute the following command
  4. jad -o -r -sjava -dsrc src/**/*.class (./jad on terminal)
Extract jar contents to src folder
Running jad command
Now src will contain decompiled Java files ready for manual code review.
Decompiled java files

Tools Used

  1. Sample app – RemoteDroid (Opensource – link)
  2. Astro File Manager (Android Market – link)
  3. Dex2Jar (link)
  4. jd-gui (link)
  5. JAD (link)
Dex2Jar Info
App NameDex2Jar
Licensefree
Type
  • portable
  • code
App URLDownload
More Infolink
Extract Android apk from Market and Decompile it to Java Source Reviewed by Unknown on 15:12 Rating: 5

7 comments:

  1. Hello everyone..Welcome to my free masterclass strategy where i teach experience and inexperience traders the secret behind a successful trade.And how to be profitable in trading I will also teach you how to make a profit of $12,000 USD weekly and how to get back all your lost funds feel free to email me on( brucedavid004@gmail.com ) or whataspp number is +22999290178  
















    Hello everyone..Welcome to my free masterclass strategy where i teach experience and inexperience traders the secret behind a successful trade.And how to be profitable in trading I will also teach you how to make a profit of $12,000 USD weekly and how to get back all your lost funds feel free to email me on( brucedavid004@gmail.com ) or whataspp number is +22999290178  

    ReplyDelete
  2. Hello guys am Chris and am here to share this wonderful experience by hacking world channel , they are the best around which you can trust and work with , this hacking channel helped me get through my cheating spouse phone without noticing, just to get rid of doubt, because if we have doubt in anything we are doing it will never work out , I was beyond impressed with this group, everything was done perfectly without any issues , with just my spouse phone number and that’s it. You too can get rid of doubt , contact smart hacking channel via web: www . Smarthackingworld . com or via mail
    smarthackingworld@gmail.com. let them k now Chris tucker referred you in.

    ReplyDelete
  3. Hi guys, if you're in need of a professional hacker to help track your spouse's cell phone remotely, contact deadlyhacker01@gmail.com , or whatsapp/sms +1 3478577580 , they were very reliable in hacking and giving me full access to my cheating wife's phone effortlessly.

    ReplyDelete
  4. Hello Everyone !

    USA SSN Leads/Dead Fullz available, along with Driving License/ID Number with good connectivity.

    All SSN's are Tested & Verified.

    **DETAILS IN LEADS/FULLZ**

    ->FULL NAME
    ->SSN
    ->DATE OF BIRTH
    ->DRIVING LICENSE NUMBER
    ->ADDRESS WITH ZIP
    ->PHONE NUMBER, EMAIL
    ->EMPLOYEE DETAILS

    *Price for SSN lead $2
    *You can ask for sample before any deal
    *If you buy in bulk, will give you discount
    *Sampling is just for serious buyers

    ->Hope for the long term business
    ->You can buy for your specific states too

    **Contact 24/7**

    Whatsapp > +923172721122

    Email > leads.sellers1212@gmail.com

    Telegram > @leadsupplier

    ICQ > 752822040

    ReplyDelete
  5. He is no scam,i tested him and he delivered a good job,he helped me settle bank loans,he also helped my son upgrade his scores at high school final year which made him graduate successfully and he gave my son free scholarship into the college,all i had to do was to settle the bills for the tools on the job,i used $500 to get a job of over $50000 done all thanks to Walt,he saved me from all my troubles,sharing this is how i can show gratitude in return for all he has done for me and my family

    Gmail; Brillianthackers800@gmail.com
    Whatsapp number; +1(224)2140835

    ReplyDelete
  6. We have the fresh and valid USA ssn leads
    99% connectivity with quality
    ====================
    *If you have any trust issue you can buy few to test
    *Every leads are well checked and available 24 hours
    *Fully cooperate with clients
    ====================
    >> SSN+DOB
    >> SSN+DOB+DL
    >> Premium high score fullz (also included relative info)
    ====================
    TUTORIALS AVAILABLE FOR
    SPAMMING
    CARDING
    CASHOUTS
    MOBILE DEPOSITS
    >APPLE PAY & ANDROID TAP CASH
    >BANK TRANSFER
    >HOW TO CASHOUT DUMPS+PINS
    >MOBILE DEPOSIT
    ====================
    >SAFE SOCKS5 (USA)
    >SMTP Linux Root
    -->DUMPS+PINS
    (How to use & create dumps with pins track 1 & 2)
    =====================
    Also SELLING
    >SERVER I.P's & proxies in bulk
    >USA EMAILS Combo
    >Fresh Leads for tax returns & w-2 form filling
    >CC's with CVV's (vbv & non-vbv)
    >USA Photo ID'S (Front & back)
    >Payment mode BTC, ETH, LTC, & USDT

    Telegram : @Cyberz_Phoenix
    ICQ : @1001829652
    WICKR : @cyberzphoenix

    ReplyDelete
  7. Stainless Steel | Titanium Art - T-Tech
    The stainless steel seiko titanium watch finish titanium 3d printing is a stainless steel piece which provides an extremely attractive stainless stiletto titanium hammer steel shell that provides excellent protection titanium nail for corrosion. welding titanium

    ReplyDelete

All Rights Reserved by True Hackers © 2014 - 2015
Powered By Blogger, Designed by Sweetheme

Contact Form

Name

Email *

Message *

Powered by Blogger.