> For the complete documentation index, see [llms.txt](https://heapbytes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heapbytes.gitbook.io/notes/apk-pentesting/tools-and-get-started.md).

# Tools & Get Started

Install adb,\
any emulator of your choice (android studio/nox emulator for windows, genimotion for linux)<br>

### Burp certificate

1\. Turn on burp,\
2\. Go on 127.0.0.1:8080 (or wherever u have ur proxy set)\
3\. Dowload the certificate\
4\. Move the certificate to `.crt`\
5\. `adb push cert.crt /sdcard/cacert.crt`\
6\. Go ahead and install it from you system setting -> Security -> Install certificates -> Install from SD Card.<br>

#### Note: For rooted android, you might need to install magisk to install the certificate as System Cert.

### adb device not showing?

```
adb kill-server
adb start-server
adb devices
```

### Emulators

[Genymotion Android Emulator](https://www.genymotion.com/)\
[Nox Emulator](https://www.bignox.com/)<br>

### General

&#x20;    **js-beautify**: node js module to beautify js locally (if the file big and cannot be handled by online website)

### Java

[Install Java](https://www.java.com/en/download)\
[Java Development Kit 1.7](https://www.oracle.com/technetwork/java/javase/downloads/java-archive-downloads-javase7-521261.html)

### Apk decompiling

&#x20;   [jadx](https://github.com/skylot/jadx/releases/): APK -> java \[ apk -> smali -> java ]\
&#x20;   jadx-gui:  GUI version of jadx&#x20;

&#x20;   [Dex2Jar](https://sourceforge.net/projects/dex2jar/): APK -> JAR file.\
&#x20;   Later we can use [JD-GUI](http://java-decompiler.github.io/) to see Java code \[ JAR -> Java ]

&#x20;   [apktool](https://ibotpeaches.github.io/Apktool/install/): APK -> smali. (smali is basically asm code for android)

### Static Analysis

&#x20;    Qark\
&#x20;    <https://github.com/linkedin/qark>

&#x20;    MobSF\
&#x20;    <https://github.com/MobSF/Mobile-Security-Framework-MobSF>

### Deobfuscate

&#x20;    [Deguard](http://apk-deguard.com/): Helps deobfuscating

&#x20;    <https://github.com/P1sec/hermes-dec> - Helps debofuscating reactive native app data       (`index.android.bundle` )

### Decompress/extract

&#x20;     <https://github.com/jakev/pyxamstore> - used to extract dll from `assemblies.blob`\
`sudo pip3 install git+https://github.com/jakev/pyxamstore.git`