ZA

zmbcen/apk-security-guard-mcp-suite

Developer tools

Эта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал

0 stars 11 forks Качество 57 Тренд 0

This project aims to provide a one-stop automated solution for Android APK security analysis and vulnerability detection.

Обзор

This project aims to provide a one-stop automated solution for Android APK security analysis and vulnerability detection. By integrating mainstream decompilation, static analysis, dynamic analysis and other tools such as JEB, JADX, APKTOOL, FlowDroid, MobSF, etc., and unifying them into MCP (Model Context Protocol) standard API interfaces, the automation and efficiency of security analysis are greatly improved. It is suitable for security researchers, penetration testers, developers and other users who have requirements for APK security. To avoid dependency conflicts in the global environment, it is highly recommended to use a Python virtual environment for managing project dependencies. Here are the detailed installation steps: 2. After confirming the virtual environment is activated (you should see (myenv) in your command prompt), install the project dependencies: 3. If you need to use MobSF related APIs, install Node.

README

Показан фрагмент оригинального README. Открыть оригинал.

🚦 APK Security Guard MCP Suite


📝 Project Introduction

This project aims to provide a one-stop automated solution for Android APK security analysis and vulnerability detection. By integrating mainstream decompilation, static analysis, dynamic analysis and other tools such as JEB, JADX, APKTOOL, FlowDroid, MobSF, etc., and unifying them into MCP (Model Context Protocol) standard API interfaces, the automation and efficiency of security analysis are greatly improved. It is suitable for security researchers, penetration testers, developers and other users who have requirements for APK security.


🎬 Effect display

Waiting for the video to upload…


⚙️ Configuration Instructions

🧩 Install Dependencies

To avoid dependency conflicts in the global environment, it is highly recommended to use a Python virtual environment for managing project dependencies. Here are the detailed installation steps:

  1. Create a new virtual environment:
# For Windows
python -m venv myenv
myenv\Scripts\activate

# For Linux/MacOS
python -m venv myenv
source myenv/bin/activate
  1. After confirming the virtual environment is activated (you should see (myenv) in your command prompt), install the project dependencies:
pip install -r requirements.txt
  1. If you need to use MobSF related APIs, install Node.js dependencies separately, navigate to the MobSF-MCP directory:
npm install -g mobsf-mcp

📝 Notes:

  • Python 3.11 is recommended
  • Remember to activate the virtual environment each time you start a new working session

📦 Plugin or Script Installation Recommendations

JEB MCP Script

The script needs to be placed in the scripts folder of the JEB tool in advance.

  1. Open JEB and navigate to File > Scripts > Script Selector.
  2. Select and run MCP.py from your script list.
  3. If the script is loaded and running successfully, you should see the following messages in the JEB output console:
[MCP] Plugin loaded
[MCP] Plugin running
[MCP] Server started at http://localhost:16161

JADX MCP Plugin

  • Java 17 is required for building and running the plugin.
  • In the JADX-MCP root directory, run:
    ./gradlew build
    
  • After building, the plugin JAR will be generated at:
    plugin/build/libs/JADX-MCP-Plugin.jar
    
  • Alternatively, you can directly use the pre-built JAR package: Download JADX-MCP-Plugin.jar
  • Copy the JAR file to the lib folder of your jadx-gui installation:
    cp plugin/build/libs/JADX-MCP-Plugin.jar /lib/
    

APKTOOL

To install APKTool on Windows, you can use Chocolatey (a popular Windows package manager):

Open PowerShell as Administrator.

Открыть полный README на GitHub

Установка

npx mobsf-mcp
Новичок в MCP? Начните с руководства на mcpskill.org →

Конфигурация

{ "mcpServers": { "Jadx MCP Server": { "disabled": false, "timeout": 60, "command": "myenv\\Scripts\\python.exe", "args": [ "JADX-MCP\\fastmcp_adapter.py" ], "transportType": "stdio" }, "JEB MCP Server": { "disabled": false, "timeout": 1800, "command": "myenv\\Scripts\\python.exe", "args": [ "JEB-MCP\\server.py" ], "transportType": "stdio" }, "FlowDroid MCP Server": { "disabled": false, "timeout": 60, "command": "myenv\\Scripts\\python.exe", "args": [ "FlowDroid-MCP\\script\\flowdroid_mcp.py" ], "transportType": "stdio" }, "MobSF MCP Server": { "disabled": false, "timeout": 60, "command": "Nodejs\\node.exe", "args": [ "MobSF-MCP\\build\\index.js" ], "env": { "MOBSF_URL": "http://localhost:8000", "MOBSF_API_KEY": "your_api_key_here" }, "transportType": "stdio" }, "APKTOOL MCP Server": { "disabled": false, "timeout": 60, "command": "myenv\\Scripts\\python.exe", "args": [ "APKTOOL-MCP\\apktool_mcp_server.py" ], "transportType": "stdio" } } }