CyberArmor is an in-house Android APK hardening / reinforcement toolkit — the same class of tool as 360 Jiagu. It packs a built APK behind a native stub loader, encrypts code and resources, applies runtime self-protection, and re-signs the result. Runtime-validated on a real device (Android 14, arm64).
Highlights
- DEX encryption + in-memory loading — original DEX pulled out, AES-256-GCM encrypted, decrypted and injected at launch. Nothing plaintext on disk.
- SO protection & anti-theft — the app's own native libraries are encrypted and loaded transparently from memory (
android_dlopen_exthook), with the key bound to the signing certificate. - Transparent asset protection — encrypted assets served through an
AssetManagerhook; the app's ownopen()sees plaintext. - Integrity & anti-repackaging — signature verification, file-integrity checks, per-build fingerprint, v1+v2+v3 re-signing.
- RASP — anti-debug, ART-safe anti-ptrace, anti-Frida/Xposed, root/emulator/double-open/accessibility detection,
FLAG_SECURE, anti-hijacking, log suppression (PLT hook). - Surgical, resource-safe repackaging — binary-AXML manifest editing;
resources.arscis never re-encoded, so modern (aapt2) apps repackage cleanly.
Stack
Kotlin packer-core pipeline · Spring Boot 4 REST service · Clikt CLI · C++/NDK protection shell · Java→DEX bootstrap.
Usage
See the README, per-feature docs/, and FEATURES.md.
Only harden APKs you own or are authorized to repackage and re-sign.