offensive-tools/rev/dex2jar/SKILL.md
Auth/lab ref: Android DEX-to-JAR conversion toolkit for feeding Java bytecode into desktop decompilers and analysis tools.
npx skillsauth add aeondave/malskill dex2jarInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Bridges Android DEX artifacts into traditional Java tooling.
Use dex2jar when you need to:
.dex or .apk input into .jar output for JVM tools.class files instead of Dalvik directly# Convert a DEX file
d2j-dex2jar.sh classes.dex
# Convert an APK directly
d2j-dex2jar.sh app.apk
# Windows launcher equivalent
d2j-dex2jar.bat app.apk
apktool, jadx, or androguard first for broad APK triage.jadx nearby; its direct APK/DEX support is often better for large manual review.classes*.dex files exist, convert each or start from the full APK.No bundled scripts/, references/, or assets/.
Use the upstream dex2jar project docs for exact launcher names and auxiliary conversion helpers.
development
White-box auditing methodology for AI-generated ('vibe-coded') applications. Focuses on modern stack misconfigurations (Supabase, Next.js, Vercel).
development
Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.
development
Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.
devops
Container methodology: Identifying containerization limits, Docker/K8s misconfigurations, and executing escapes to the host node.