{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/charles2gan/GDA-android-reversing-Tool/blob/20f8ce8d51b0dc032c08e009e28ea76995d71889/LICENSE",
    "https://github.com/charles2gan/GDA-android-reversing-Tool/blob/20f8ce8d51b0dc032c08e009e28ea76995d71889/NOTICE",
    "https://github.com/charles2gan/GDA-android-reversing-Tool/blob/20f8ce8d51b0dc032c08e009e28ea76995d71889/skills/mal_skill/SKILL.md",
    "https://github.com/charles2gan/GDA-android-reversing-Tool/blob/20f8ce8d51b0dc032c08e009e28ea76995d71889/update_history",
    "https://github.com/charles2gan/GDA-android-reversing-Tool/releases/tag/GDA4.12"
  ],
  "category": "android",
  "description_en": "Windows-native Dalvik decompiler and Android analysis workbench written in C++ that opens APK, DEX, ODEX, OAT, JAR, AAR and class files without installation. Besides Java and Smali views with cross-references, renaming and comments, it identifies packers, deobfuscates and decrypts strings, tracks data flow and taint, solves paths, runs rule-based malicious-behaviour, vulnerability and privacy-leak scans, and can dump device memory or hook methods with Frida. Shell and server CLI modes, Python and Java scripting and a sample malware-triage agent skill expose the same analysis to scripts and agents.",
  "description_zh": "以 C++ 编写、原生运行于 Windows 的 Dalvik 反编译器与 Android 分析工作台，无需安装即可打开 APK、DEX、ODEX、OAT、JAR、AAR 和 class 文件。除带交叉引用、重命名和注释的 Java 与 Smali 视图外，它还能识别加固壳、反混淆并解密字符串、追踪数据流与污点、求解路径，运行基于规则的恶意行为、漏洞和隐私泄露扫描，并可转储设备内存或用 Frida 钩挂方法。Shell 与服务器两种命令行模式、Python 和 Java 脚本以及一个恶意软件分诊智能体技能示例，让脚本和智能体也能调用这些分析功能。",
  "entry_url": "https://awesomerea.org/resources/gda-android-decompiler/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/gda-android-decompiler/",
  "evidence_url": "https://github.com/charles2gan/GDA-android-reversing-Tool/blob/20f8ce8d51b0dc032c08e009e28ea76995d71889/README.md",
  "group": "tools",
  "id": "gda-android-decompiler",
  "json_url": "https://awesomerea.org/resources/gda-android-decompiler/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/gda-android-decompiler/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/gda-android-decompiler/index.md",
  "name": "GDA (GJoy Dex Analyzer)",
  "name_zh": "GDA Android 反编译器",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Releases are Windows-only zip archives; the latest, GDA 4.12 of 2026-04-07, adds shell and server CLI modes among fixes. The repository holds no decompiler source: the README says GDA is not an open-source project, at least in the short term, and the repository publishes the free binaries with open scripts, plugin examples, rule samples and colour themes.",
    "The executable runs without setup. Dex-family inputs need no Java, while JAR, AAR and class files need a working Java runtime for the bundled dx tool. The README says GDA is protected with VMProtect and unpacks embedded adb, a gdump memory-dump helper and rule files into the user’s application-data folder, which some antivirus products flag; the author states it has no malicious behaviour.",
    "The skills folder holds a gda-analyze skill in Claude Code’s format that drives a bundled GDA.exe through a Python wrapper to trace code, extract indicators and draft malware reports, plus a server-mode client and test script. Its output, like the built-in rule-based scans, needs manual confirmation.",
    "LICENSE is Apache-2.0, and NOTICE says most of GDA is released under it, with adb and dex libraries taken from the Android SDK and AOSP; this conflicts with the README’s closed-source statement, so the binaries’ terms are unclear. Users supply the apps they analyze."
  ],
  "requirements_zh": [
    "发布版均为仅支持 Windows 的 zip 压缩包；最新的 GDA 4.12 发布于 2026-04-07，除修复问题外新增了 Shell 与服务器两种命令行模式。仓库不包含反编译器源码：README 称 GDA 并非开源项目（至少短期内如此），仓库发布的是免费的二进制程序以及开源脚本、插件示例、规则样例和配色主题。",
    "程序无需安装即可运行。Dex 系列文件无需 Java，而 JAR、AAR 和 class 文件需要可正常运行的 Java 环境以调用附带的 dx 工具。README 称 GDA 使用 VMProtect 保护，并会把内置的 adb、用于转储内存的 gdump 及规则文件释放到用户的应用数据目录，因此可能被部分杀毒软件误报；作者声明其没有恶意行为。",
    "skills 目录包含一个采用 Claude Code 格式的 gda-analyze 技能，通过 Python 封装调用随附的 GDA.exe，用于追踪代码、提取威胁指标并起草恶意软件报告；另有服务器模式客户端和测试脚本。其输出与内置的基于规则的扫描结果一样，需要人工确认。",
    "LICENSE 为 Apache-2.0，NOTICE 也称 GDA 大部分内容以该许可证发布，其中 adb 和 dex 库取自 Android SDK 与 AOSP；这与 README 中的闭源说法相互矛盾，因此二进制程序的使用条款并不明确。待分析的应用由使用者自备。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/charles2gan/GDA-android-reversing-Tool",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}