A (hopefully) generic unpacker for packed Android apps.
How does it work?
The tool is a patched version of AOSP with some additional scripts. The scripts executes the emulator and installs the APK. Following execution, it dumps the unpacked version of the DEX using different hooks. The result is two files, one of them should be the real dumped version of the DEX file, depending on how the targeted packer works.
Presented in DEF CON 25 (2017) by:
- Slava Makkaveev
- Avi Bashan
How to build?
- Clone the AOSP project using the following instructions.
$ git apply(Please note, your cwd should be
- Build the AOSP source using
$ lunch full-eng
Execute the following command
$ ./unpacker.sh <aosp folder> <apk>
The unpacked DEX file will be created in the current working dir.
Released under "Apache 2.0" license.