jadx

Overview

JADX decompiles Android DEX/APK to Java source with GUI and CLI. Resource decoding, smali toggle, and search across codebase.

Common first step in mobile app assessments before deeper frida instrumentation.

Primary use cases

• Android app static analysis for secrets and API endpoints
• Malware APK triage

Key commands

jadx -d output/ app.apk

Related tools

• Ghidra — Reverse engineering IDE. Disassembly, decompilation, scripting, and binary diffing.
• YARA — Malware identification language. String/hex patterns with boolean conditions over scanned files.