The community knowledge base of Android obfuscation maps — a shared, searchable database of obfuscated app internals.
rosetta-maps is a shared, PR-gated repository of per-app, per-version obfuscation
maps — the real → obfuscated names for an app version. Contribute a map once and
every consumer of that version gets it for free. The maps are consumed directly by
the rosetta-frida and
rosetta-xposed adapters, and each map
is reproducible from the signatures it was generated from plus the APK — so a
contribution is verifiable, not just trusted.
This repo is data + CI: strict JSON maps, the sigmatcher signatures they come from, and the validation that gates them. It owns the canonical, language-neutral map schema; the adapters are clients that track it (rosetta-frida is the first-class client).
A pull request adds (or extends) one (app, version_code) map:
signatures/<app>/signatures.yaml— the source of truth (sigmatcher rules).maps/<app>/<version_code>.json— the published artifact, resolved from those signatures + the APK.
CI validates every map against the canonical schema and checks the filename against
the map's version_code. No APK is ever uploaded. See
CONTRIBUTING.md for the full workflow.
Full docs are at iliketo.party/rosetta-maps:
- Quickstart — grab a map and load it.
- Contributing — how to add a map.
- Repository layout — what lives where.
- Trust model & validation — the trust ladder and what CI does.
- Map schema — the canonical schema this repo owns.
- rosetta-frida — the Frida adapter and first-class client of the map schema.
- rosetta-xposed — the Xposed/LSPosed/LSPatch adapter; another client that consumes these maps.
This repo owns the canonical map schema (schema/); the adapters above consume it.
MIT. Maps and signatures contributed here are released under the same license; see CONTRIBUTING.md for the provenance expectations.