Mcsd7 / ReaDroid
git clone https://github.com/Mcsd7/ReaDroid.git
Android APK reverse engineering toolkit for Termux — no root required.
—
stars, 24h
+50
stars, 7 days · #927
+50
stars, 30 days · #5,933
50
★ total · +50% this week
14
forks · 4 open issues
Star history starts 2026-10-20; the chart appears after the second daily snapshot.
LanguagePython
LicenseMIT
Created2026-10-16 (4d ago)
Last pushtoday
Watchers2
OwnerUser
Links
- GitHub: github.com/Mcsd7/ReaDroid
- Releases · Issues · Hacker News mentions
README excerpt
# ReaDroid **Android Reverse Engineering Toolkit** — static analysis and APK rebuilding for Android 12–16, designed to run on Termux without root. The AI assistant is **optional**: ReaDroid works fully without it. > **OffensiveTec** is a subtle watermark in the terminal interface. ## Features - Inspection of APK ZIP structure, SHA-256 hashes, DEX files, and native libraries. - **Native binary AndroidManifest.xml (AXML) parser**, in pure Python — decodes the manifest of any real-world APK without requiring JADX, Apktool, or aapt2. These tools remain available as fallbacks for the rare cases where the built-in parser cannot handle the structure. - Static extraction of URLs, domains (validated against a list of real TLDs to avoid mistaking class names for domains), and IPv4 address candidates. - Optional JADX integration to decompile DEX into approximate Java code. - Optional Apktool integration to extract resources and smali. - **Automated rebuilding, alignment, and signing**: after editing extracted smali/resources, a single workflow (`apktool b` + `zipalign` + `apksigner`/`jarsigner`) outputs an install-ready APK. - **Quick edits** to the decoded manifest (debuggable, allowBackup, cleartext traffic, INTERNET permission) before rebuilding. - **Package renaming (applicationId)**: moves smali folders and updates class references as well as the manifest — best-effort, intended for repackaging your own app under a different package name. - Local JSON reports, without external services or telemetry. - Terminal menu designed for mobile screens, with sanitized output (preventing malicious APKs from injecting ANSI escape sequences into your terminal). - Interactive file explorer to browse and view Java, Kotlin, Smali, XML, JSON files, reports, and rebuilt APKs directly from the menu. - JADX results classified as success, partial, or failure based on the exit code and generated files. - Outputs saved in the active project directory, avoiding confusion with another `~/ReaDroid` path. ## Compatibility ReaDroid relies on Python and the standard library for its core functionality (including manifest parsing). It was written targeting Termux ARM64 and Android 12–16, though it could not be tested across every device/version combination. Optional external tools depend on the packages and architecture available in the user's Termux repository. Compatible with Python 3.9 or newer. JADX requires a compatible Java runtime; upstream documentation specifies Java 11 or later. The Termux JADX package typically depends on Termux's packaged OpenJDK. Apktool on Android has known official incompatibilities in certain configurations, so this feature is optional and should be validated on your device. ## Installation on Termux Update packages: [code] `aapt` already includes `zipalign`. If `openjdk-21`, `jadx`, `apktool`, or `apksigner` are not available in your configured repository, install the available packages and consult the official Termux documentation/README.