{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/APKLab/APKLab/blob/6ae69b1ba03d65cb78388f7e2fa6a3b8f0081c74/CHANGELOG.md",
    "https://github.com/APKLab/APKLab/blob/6ae69b1ba03d65cb78388f7e2fa6a3b8f0081c74/package.json",
    "https://github.com/APKLab/APKLab/blob/6ae69b1ba03d65cb78388f7e2fa6a3b8f0081c74/src/data/constants.ts",
    "https://github.com/APKLab/APKLab/blob/6ae69b1ba03d65cb78388f7e2fa6a3b8f0081c74/.github/workflows/apklab.yml",
    "https://github.com/APKLab/APKLab/blob/6ae69b1ba03d65cb78388f7e2fa6a3b8f0081c74/LICENSE",
    "https://github.com/APKLab/website/blob/f8afc6deac69b4ef77f741f891e4d836bf3720f9/static/apklab_update_config.json"
  ],
  "category": "android",
  "description_en": "VS Code extension that turns the editor into an Android reverse-engineering workbench around Apktool, Jadx, smali-lsp and uber-apk-signer. It decodes an APK into resources and Smali, decompiles it to Java, gives Smali go-to-definition, references and diagnostics through a language server, and rebuilds, signs and installs the modified app. It can also generate Frida hooks for Smali methods, add a Frida gadget, prepare an app for HTTPS traffic inspection with apk-mitm and produce a Quark-Engine malware-analysis report.",
  "description_zh": "把 VS Code 变成 Android 逆向工作台的扩展，整合 Apktool、Jadx、smali-lsp 和 uber-apk-signer。它可将 APK 解码为资源文件和 Smali 并反编译为 Java，借助语言服务器为 Smali 提供定义跳转、引用查找和诊断，还能重新构建、签名并安装修改后的应用。此外，它可为 Smali 方法生成 Frida 钩子、加入 Frida gadget、借助 apk-mitm 为 HTTPS 流量检查做准备，并生成 Quark-Engine 恶意软件分析报告。",
  "entry_url": "https://awesomerea.org/resources/apklab/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/apklab/",
  "evidence_url": "https://github.com/APKLab/APKLab/blob/6ae69b1ba03d65cb78388f7e2fa6a3b8f0081c74/README.md",
  "group": "tools",
  "id": "apklab",
  "json_url": "https://awesomerea.org/resources/apklab/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/apklab/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/apklab/index.md",
  "name": "APKLab",
  "name_zh": "APKLab Android 逆向工作台",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "The latest tag, v2.0.0, dated 2026-04-06 in the changelog, added smali-lsp, Frida hook generation and gadget injection and Apktool 3.0+ compatibility; the reviewed master commit of 2026-07-16 is five commits ahead of it. The extension is published on the VS Code Marketplace and Open VSX, and package.json requires VS Code 1.91+. The README lists Linux, macOS and WSL2, and CI also builds and tests it on Windows.",
    "JDK 17+ is required. On first use the extension downloads the tools named in the project’s update configuration into a .apklab folder in the user’s home directory, at review Apktool 3.0.2, smali-lsp 1.5.0, uber-apk-signer 1.3.0 and Jadx 1.5.6, unless the user sets their paths. adb is optional for installing to a device, and Quark-Engine 21.01.6+ is optional for malware reports. Users supply the APKs.",
    "CI lints and packages the extension and runs its test suite on Ubuntu, macOS and Windows against a sample open-source APK from the separate testdata repository. Jadx output can be incomplete, and rebuilt APKs are re-signed with uber-apk-signer, using the configured keystore when one is set.",
    "AGPL-3.0; Apktool, Jadx, smali-lsp, uber-apk-signer, apk-mitm, Frida and Quark-Engine keep their own licenses. HTTPS-inspection patching and gadget injection modify the app under analysis, and the tool grants no rights to analyze, patch or redistribute third-party apps."
  ],
  "requirements_zh": [
    "最新标签 v2.0.0 在更新日志中的日期为 2026-04-06，新增 smali-lsp、Frida 钩子生成与 gadget 注入，并兼容 Apktool 3.0+；所审阅的 master 分支提交日期为 2026-07-16，比该标签多 5 个提交。扩展发布在 VS Code 应用市场和 Open VSX，package.json 要求 VS Code 1.91+。README 列出 Linux、macOS 和 WSL2，CI 还在 Windows 上构建和测试。",
    "需要 JDK 17+。首次使用时，扩展会把项目更新配置中列出的工具下载到用户主目录下的 .apklab 文件夹，审阅时为 Apktool 3.0.2、smali-lsp 1.5.0、uber-apk-signer 1.3.0 和 Jadx 1.5.6；使用者也可自行指定路径。adb 为可选项，用于安装到设备；Quark-Engine 21.01.6+ 为可选项，用于生成恶意软件报告。APK 由使用者自备。",
    "CI 在 Ubuntu、macOS 和 Windows 上运行代码检查、打包扩展并执行测试套件，测试使用独立 testdata 仓库中的一个开源示例 APK。Jadx 的输出可能不完整；重新构建的 APK 由 uber-apk-signer 重新签名，设置了密钥库时使用该密钥库。",
    "采用 AGPL-3.0 许可；Apktool、Jadx、smali-lsp、uber-apk-signer、apk-mitm、Frida 和 Quark-Engine 保留各自许可证。HTTPS 检查补丁和 gadget 注入会修改被分析的应用，本工具不授予分析、修补或再分发第三方应用的任何权利。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/APKLab/APKLab",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}