dex2jar

Tools to work with android .dex and java .class files (by pxb1988)
Add to my DEV experience Suggest topics
Source Code
dex2jar Reviews
Suggest alternative
Edit details
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Dex2jar Alternatives

Similar projects and alternatives to dex2jar

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better dex2jar alternative or higher similarity.
Suggest an alternative to dex2jar

dex2jar reviews and mentions

Posts with mentions or reviews of dex2jar. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-04-03.
  • Understanding security in React Native applications
    9 projects | dev.to | 3 Apr 2024
    App tampering and repackaging can be performed by using reverse engineering or tampering tools, such as Apktool, dex2jar, etc.
  • What Happens When Your Phone Is Spying on You
    2 projects | news.ycombinator.com | 15 Mar 2023
    A week ago I purchased a bluetooth device that takes some measurements. You require an Android or iOS application. The first thing the iOS app did was request permission for your location. Immediate fired up MITMproxy [1] running in transparent `--mode wireguard` and installed it's certificate in the iOS trust store. It was sending a whole bunch of data to China and HK. Since I don't have a jailbroken iPhone, it's off to Android.

    For BLE scanning, Android does require permissions for location, but this application is using a Chinese branded tracking SDK and sending encrypted (within already encrypted TLS). So it's time to start reversing and instrumenting the runtime.

    Well - not so easy, they used a commercial packer that encrypts their compiled bytecode and decrypts and runs it within a C++ library. I managed to bull the Dalvik out of memory using Frida[2], covert it to java bytecode with dex2jar[3] then into decompiled java with jadx [3].

    Since the developer relied on the packer to hide/obfuscate their software, it's quite easy to follow. The libraries that do the location tracking on the otherhand are obfuscated so now I'm at the stage of identifying where to hook before the encrypted blobs are sent to servers in China.

    I've sunk about 8 hours into this so far. The message here is that to understand what some applications on your phone does you need to really invest time and effort. The developers increase the cost to the consumer to know what their application is doing by obfuscation, encryption and packing. It's asymmetric.

    [1] https://mitmproxy.org/posts/wireguard-mode/

    [2] https://frida.re/docs/android/

    [3] https://github.com/skylot/jadx

    [3] https://github.com/pxb1988/dex2jar

  • Reverse Engineering Tools in 2022
    3 projects | news.ycombinator.com | 18 Sep 2022
    I think they forgot to google translate the disadvantages of JEB Decompiler

    I haven't used JEB to comment, but I've gotten a lot of mileage out of https://github.com/pxb1988/dex2jar#readme and then feed the normal Java jars it produces into https://github.com/mstrobel/procyon#readme and (of course) one shouldn't overlook picking your favorite tool for dealing with AndroidManifest.xml which often has fun things hiding in it

    While digging up those links, I was reminded that some folks enjoy https://github.com/Konloch/bytecode-viewer#is-there-a-demo because it can be easier to "try out" a few of the decompilation engines, but I don't use it because it's hard to do batch things with it, versus dex2jar into procyon is automation friendly

  • The Code the FBI Used to Wiretap the World
    5 projects | news.ycombinator.com | 7 Jul 2022
  • Decompilers for android
    2 projects | /r/androiddev | 22 Sep 2021
    Take a look at apktool: https://ibotpeaches.github.io/Apktool/ and dex2jar: https://github.com/pxb1988/dex2jar
  • A note from our sponsor - WorkOS
    workos.com | 19 Apr 2024
    The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Stats

Basic dex2jar repo stats
5
11,830
5.4
11 days ago

pxb1988/dex2jar is an open source project licensed under Apache License 2.0 which is an OSI approved license.

The primary programming language of dex2jar is Java.

Popular Comparisons

  1. dex2jar VS Apktool
  2. dex2jar VS comm
  3. dex2jar VS vineflower
  4. dex2jar VS ricochet
  5. dex2jar VS Recaf
  6. dex2jar VS procyon
  7. dex2jar VS bytecode-viewer
  8. dex2jar VS jadx
  9. dex2jar VS MMKV
  10. dex2jar VS Free-RASP-ReactNative

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com