Individual skill
android-pentest
安卓应用渗透测试 — APK分析、Hook、自动化测试、运行态驱动、签名恢复、抓包分析
deepsec/spear/skills/specialized/android-pentest/SKILL.md
Source commit fff031fc01fb36b95348214c8ee359f6ede8aa8b
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Not checked yet
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 510
- Repository last updated
- Aug 24, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent Repository topic
- ai Repository topic
- ai-agents Repository topic
- aisecurity Repository topic
- cybersecurity Repository topic
- plugin Repository topic
- security Repository topic
- vscode Repository topic
- vulnerability Repository topic
- hacker Repository topic
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 2,307 bytesreferences/android-authorized-app-pentest-sop.mddoc · 5,535 bytesreferences/android-dynamic-hooking-and-replay.mddoc · 2,216 bytesreferences/android-external-url-runtime-first-workflow.mddoc · 8,886 bytesreferences/android-native-signature-analysis.mddoc · 1,160 bytesreferences/android-network-layer-testing-quick-reference.mddoc · 5,135 bytesreferences/android-signature-reverse-template.mddoc · 2,199 bytesreferences/android-signing-and-crypto-workflow.mddoc · 7,552 bytesreferences/android-static-triage-and-callflow.mddoc · 1,536 bytesreferences/android-ui-driven-observation-and-packet-loop.mddoc · 9,331 bytes
Read excerpt
# 安卓应用渗透测试 Skill
针对安卓应用的专项渗透测试，遵循 **runtime-first** 原则：先运行态驱动、先抓包，最后才逆向。
**需要更深入的客户端逆向知识？** 使用 `client-reverse` Skill，包含完整的签名恢复、加密还原、Burp 重放工作流。
## 核心原则
**不要先逆向 APK**。默认操作顺序：
1. 确认目标 App 已安装在连接设备上
2. 准备好 Burp 或 Charles 抓包
3. 用 scrcpy_vision 驱动真实业务流程
4. 每个关键动作后检查抓包状态
5. 包可见且可重放 → 直接做 Web/API 安全测试