CyberArmor v0.1.0 — APK hardening toolkit

CyberArmor is an in-house Android APK hardening / reinforcement toolkit — the same class of tool as 360 Jiagu. It packs a built APK behind a native stub loader, encrypts code and resources, applies runtime self-protection, and re-signs the result. Runtime-validated on a real device (Android 14, arm64).

Highlights

• DEX encryption + in-memory loading — original DEX pulled out, AES-256-GCM encrypted, decrypted and injected at launch. Nothing plaintext on disk.
• SO protection & anti-theft — the app's own native libraries are encrypted and loaded transparently from memory (android_dlopen_ext hook), with the key bound to the signing certificate.
• Transparent asset protection — encrypted assets served through an AssetManager hook; the app's own open() sees plaintext.
• Integrity & anti-repackaging — signature verification, file-integrity checks, per-build fingerprint, v1+v2+v3 re-signing.
• RASP — anti-debug, ART-safe anti-ptrace, anti-Frida/Xposed, root/emulator/double-open/accessibility detection, FLAG_SECURE, anti-hijacking, log suppression (PLT hook).
• Surgical, resource-safe repackaging — binary-AXML manifest editing; resources.arsc is never re-encoded, so modern (aapt2) apps repackage cleanly.

Stack

Kotlin packer-core pipeline · Spring Boot 4 REST service · Clikt CLI · C++/NDK protection shell · Java→DEX bootstrap.

Usage

See the README, per-feature docs/, and FEATURES.md.

Only harden APKs you own or are authorized to repackage and re-sign.