> For the complete documentation index, see [llms.txt](https://nightowl131.gitbook.io/aapg/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://nightowl131.gitbook.io/aapg/master.md).

# AAPG

## General information

My primary goal with this repo is to define a comprehensive **Android application penetration testing guide**. :nerd: 

This is an **operational** guide with the intention to assist you while performing a penetration-test and \
\&#xNAN;***NOT*** an educational guide (sorry guys :man\_shrugging:). \
\
I will provide what I've learned / will learn at work and share it here with you. To improve this guide, I would highly appreciate your help with everything you have successfully used in the wild and/or experienced so far at work.

## Used tools

* [apktool](https://ibotpeaches.github.io/Apktool/install/) 
  * AUR package (`yay -S android-apktool`) 
* [dex2jar](https://github.com/pxb1988/dex2jar) 
* [jd-gui](https://github.com/java-decompiler/jd-gui) 
* [jadx](https://github.com/skylot/jadx) 
* [adb](https://en.droidwiki.org/wiki/Android_Debug_Bridge)
  * I personally recommend installing *android-studio* \
    it comes with the SDK - including all platform-tools:
    * `sudo pacman -S andriod-studio` 
* [bettercap](https://www.bettercap.org/legacy/index.html#document-install) 
  * `sudo pacman -S bettercap`
* [dnSpy](https://github.com/0xd4d/dnSpy) - .NET decompiler (in case of Xamarin Apps) 
* [enjarify](https://github.com/google/enjarify) 
* [apk decompiler for lazy](https://github.com/b-mueller/apkx)

{% hint style="info" %}
All recommendations are based on my personal experience only.
{% endhint %}