Developers introduced the apk-reverse agent for analysis and modification of Android applications

The development team has released apk-reverse — a specialized agent designed to automate reverse engineering, cleaning, and modification processes for Android packages. The tool is focused on performing complex tasks of decompilation and code modification without human involvement.

The agent's functionality is based on the use of decision trees, which allow the system to independently determine the sequence of actions when analyzing the APK structure. The solution includes parameterized scripts that provide automatic unpacking of archives, searching for anti-tamper mechanisms, and surgical patching of DEX files.

The system supports working with on-demand links, which allows the agent to dynamically access external documentation and databases during analysis. This reduces the time spent on manual searching for signatures and obfuscation methods used in modern mobile applications. The tool is distributed with an open source code, which allows for integration into existing CI/CD pipelines for automated security testing.

The use of such agents makes it possible to reduce the time spent on the initial security audit of mobile software. Automation of deobfuscation and vulnerability detection stages in DEX code allows security specialists to focus on analyzing logical errors, delegating routine operations for parsing the application structure to algorithms.