apk.sh is a shell script that automates the reverse engineering workflow for Android applications.
The tool addresses the tedium of repeatedly pulling APK files from devices, decompiling them, modifying code or resources, and repackaging them for testing. It wraps common reverse engineering tasks into a streamlined command-line interface, handling the orchestration of tools like apktool for decoding and rebuilding, along with integration points for Frida instrumentation and Objection for runtime analysis. This automation eliminates manual steps that would otherwise consume significant time during iterative analysis and patching cycles.
The project suits developers and security researchers who regularly work with Android application internals, particularly those performing dynamic analysis, vulnerability research, or app modification. It is most valuable when you need to repeatedly cycle through the decode-modify-rebuild loop rather than performing one-off analysis. The tool assumes familiarity with Android reverse engineering concepts and the underlying tools it orchestrates.
Development activity shows consistent engagement with the codebase through regular commits addressing bugs and feature requests. The project maintains responsiveness to user-reported issues and incorporates feedback into updates. Maintenance appears focused on keeping the automation reliable as underlying tools and Android versions evolve, with attention to edge cases that arise from real-world reverse engineering scenarios.
