{
  "added_at": "2026-11-03",
  "additional_evidence_urls": [
    "https://github.com/UltraSina/androidReverse/tree/ad9dd7ab4770b089b785039a36be57f50c35f3f0",
    "https://github.com/UltraSina/androidReverse/releases/tag/v20",
    "https://github.com/UltraSina/androidReverse/releases/tag/android",
    "https://github.com/UltraSina/androidReverse/issues/2"
  ],
  "category": "android",
  "description_en": "Android app, published only as release APKs, that runs an APK reverse-engineering workflow entirely on the phone, from package extraction and Java decompilation to native analysis, editing and rebuilding. It extracts APK, XAPK and split APKS packages from storage or installed apps, decompiles each class with Jadx (with fallback and IR modes), CFR, Procyon, JD-Core, Krakatau or Vineflower, analyzes native libraries through an embedded radare2 with pseudo-C, assembly, hex, control-flow-graph and call-graph views, and since v20 edits resources, binary XML, the manifest and smali before rebuilding and signing the APK. A built-in MCP server lets MCP clients edit those project files while rebuilding stays a manual step; the README also lists Flutter Dart AOT analysis through Unflutter and Unity il2cpp metadata parsing.",
  "description_zh": "一款仅以发布版 APK 形式提供的 Android 应用，把 APK 逆向工作流全部放在手机上完成，涵盖安装包提取、Java 反编译、原生代码分析、编辑和重新打包。它可从存储或已安装应用中提取 APK、XAPK 和拆分的 APKS 安装包，逐个类在 Jadx（含回退与 IR 模式）、CFR、Procyon、JD-Core、Krakatau 和 Vineflower 之间选择引擎反编译，通过内嵌的 radare2 分析原生库并提供伪 C、汇编、十六进制、控制流图和调用图视图；自 v20 起还能编辑资源、二进制 XML、清单和 smali，再重新打包并签名 APK。内置的 MCP 服务器允许 MCP 客户端编辑这些项目文件，重新构建仍需用户手动触发；README 还列出借助 Unflutter 分析 Flutter 的 Dart AOT 代码以及解析 Unity il2cpp 元数据。",
  "entry_url": "https://awesomerea.org/resources/ultrasina-android-reverse/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/ultrasina-android-reverse/",
  "evidence_url": "https://github.com/UltraSina/androidReverse/blob/ad9dd7ab4770b089b785039a36be57f50c35f3f0/README.md",
  "group": "tools",
  "id": "ultrasina-android-reverse",
  "json_url": "https://awesomerea.org/resources/ultrasina-android-reverse/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/ultrasina-android-reverse/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/ultrasina-android-reverse/index.md",
  "name": "Android Reverse",
  "name_zh": "Android Reverse 设备端逆向套件",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Latest release at review: v20, published 2026-08-24, with arm64-v8a, armeabi-v7a and universal APKs; the README's badges name those two architectures and mark the project as in active development. The first release, on 2026-06-17, said editing and repacking were not yet available. Neither the README nor the release notes state a minimum Android version.",
    "At the reviewed commit the repository holds only the README and six screenshots: no app source, build files or license file, and GitHub detects no license, so the app's terms are unstated. The README credits radare2, Sora Editor and the CFR, Procyon, JD-Core, Krakatau, Vineflower and Jadx engines without naming their licenses.",
    "According to the README everything runs on the device, with no PC, ADB or desktop tools. Users supply the packages or installed apps they analyze, and its disclaimer limits use to education and to security research on apps whose authors have given explicit permission.",
    "The MCP server is described only in one README paragraph and the release notes, with no transport, port, tool list or setup steps, and open issue #2 reports edits made through MCP that did not appear in the app. The README does not say how its Smali Explainer produces explanations."
  ],
  "requirements_zh": [
    "审阅时最新版本为 v20，发布于 2026-08-24，提供 arm64-v8a、armeabi-v7a 和通用版 APK；README 徽章列出这两种架构，并将项目标为积极开发中。2026-06-17 的首个版本说明当时尚不支持编辑和重新打包。README 和发布说明均未写明最低 Android 版本。",
    "在所审阅的提交中，仓库只有 README 和六张截图：没有应用源码、构建文件或许可证文件，GitHub 也未检测到许可证，因此应用的使用条款并未说明。README 致谢 radare2、Sora Editor 以及 CFR、Procyon、JD-Core、Krakatau、Vineflower 和 Jadx 等引擎，但未说明它们的许可证。",
    "据 README 所述，所有操作都在设备上完成，无需电脑、ADB 或桌面工具。待分析的安装包或已安装应用由使用者自备；其免责声明将用途限定于教育，以及在获得应用作者明确许可后进行的安全研究。",
    "MCP 服务器仅在 README 的一段文字和发布说明中提及，未说明传输方式、端口、工具列表或配置步骤；未关闭的 issue #2 报告通过 MCP 所做的修改没有出现在应用中。README 也未说明 Smali Explainer 如何生成解释。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/UltraSina/androidReverse",
  "verification": "source-reviewed",
  "verified_at": "2026-10-27"
}