jadx
A command line and GUI tool for decompiling Android Dex and APK files into readable Java source code.
What is jadx?
JADX is a decompiler that converts Android Dex and APK files back into Java source code. It allows developers and security researchers to analyze compiled Android applications by recovering readable Java code from binary packages. The tool supports various input formats including APK, DEX, AAR, and AAB, and includes features like resource decoding and deobfuscation.
Android developers, security researchers, and reverse engineers who need to inspect, audit, or understand the inner workings of compiled Android applications.
JADX stands out for its comprehensive feature set, including a built-in deobfuscator, a powerful GUI with navigation tools, and support for multiple decompilation modes. It is open-source, actively maintained, and provides both command-line and graphical interfaces for flexibility.
Overview
Dex to Java decompiler
Use Cases
Best For
- Reverse engineering Android applications to understand their functionality
- Security auditing of APK files for vulnerabilities or malicious code
- Recovering lost source code from compiled Android apps
- Analyzing third-party libraries bundled in APKs
- Learning Android app internals and bytecode structure
- Deobfuscating apps protected by code obfuscation tools
Not Ideal For
- Projects requiring flawless, 100% accurate decompilation without any errors or missing code
- Automated, large-scale batch processing pipelines where GUI dependencies or Java runtime overhead might be inefficient
- Reverse engineering non-Android Java applications, such as standard desktop JAR files or server-side code
Pros & Cons
Pros
Includes capabilities to rename obfuscated classes, methods, and fields, which is essential for analyzing apps protected by tools like ProGuard or R8.
Offers syntax highlighting, jump-to-declaration, and full-text search, making code exploration intuitive and efficient for security audits.
Supports modes like 'restructure' for readable Java and 'simple' for linear code, providing flexibility based on analysis needs.
Extracts and decodes AndroidManifest.xml and resources from resources.arsc, enabling comprehensive app analysis beyond just code.
Cons
The README explicitly warns that errors occur and it can't decompile all code 100%, leading to incomplete or incorrect output in some cases.
Setting up the smali debugger requires referring to a separate wiki page and additional configuration, which can be non-trivial for casual users.
Requires Java 11 or later, which may necessitate system updates or cause compatibility issues in environments with older Java versions.
Frequently Asked Questions
Related Projects
dnSpy.NET debugger and assembly editor
ILSpy.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
ApktoolA tool for reverse engineering Android apk files
radare2UNIX-like reverse engineering framework and command-line toolset
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.