{
  "added_at": "2026-10-31",
  "additional_evidence_urls": [
    "https://github.com/ax/apk.sh/blob/2a1ed25e861dacfb4fec1aef7b099813abff24ed/README.md#L121-L130",
    "https://github.com/ax/apk.sh/blob/2a1ed25e861dacfb4fec1aef7b099813abff24ed/apk.sh",
    "https://github.com/ax/apk.sh/blob/2a1ed25e861dacfb4fec1aef7b099813abff24ed/LICENSE",
    "https://github.com/ax/apk.sh/releases/tag/v1.1.3"
  ],
  "category": "android",
  "description_en": "Bash script that automates repetitive Android app analysis chores around apktool: pulling an installed package from a device or emulator, decoding resources and disassembling dex code, and rebuilding the decoded directory into an APK. Split APKs from app bundles are combined into a single APK when pulled, and the script can also prepare a copy for Frida instrumentation.",
  "description_zh": "一个 Bash 脚本，围绕 apktool 自动完成 Android 应用分析中的重复性工作：从设备或模拟器拉取已安装的应用包、解码资源并反汇编 dex 代码，以及将解码后的目录重新构建为 APK。拉取 app bundle 的拆分 APK 时会将其合并为单个 APK，脚本还可以准备一份用于 Frida 插桩的副本。",
  "entry_url": "https://awesomerea.org/resources/apk-sh/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/apk-sh/",
  "evidence_url": "https://github.com/ax/apk.sh/blob/2a1ed25e861dacfb4fec1aef7b099813abff24ed/README.md",
  "group": "tools",
  "id": "apk-sh",
  "json_url": "https://awesomerea.org/resources/apk-sh/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/apk-sh/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/apk-sh/index.md",
  "name": "apk.sh",
  "name_zh": "apk.sh Android 应用分析脚本",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Latest release at review: v1.1.3, published 2026-01-26, which matches the reviewed main commit. It is a single Bash script; the README lists apktool, apksigner, unxz, zipalign, aapt and adb as requirements.",
    "On first use the script creates a hidden apk.sh folder in the home directory and downloads the tools it needs there, including the latest apktool release and Android build tools, so a network connection and a Java runtime are needed.",
    "Input is an APK or an installed package the user is authorized to analyze; pulling requires adb access to the device or emulator. Rebuilt APKs are modified copies, not the original package.",
    "GPL-3.0."
  ],
  "requirements_zh": [
    "审阅时的最新版本为 v1.1.3，发布于 2026-01-26，与所审阅的 main 提交一致。它是单个 Bash 脚本；README 列出的依赖为 apktool、apksigner、unxz、zipalign、aapt 和 adb。",
    "首次使用时，脚本会在用户主目录下创建隐藏的 apk.sh 文件夹，并将所需工具下载到其中，包括最新的 apktool 版本和 Android 构建工具，因此需要网络连接和 Java 运行环境。",
    "输入应为使用者有权分析的 APK 或已安装的应用包；拉取应用需要能通过 adb 访问设备或模拟器。重新构建出的 APK 是修改后的副本，并非原始安装包。",
    "采用 GPL-3.0 许可。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/ax/apk.sh",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}