zmbcen/apk-security-guard-mcp-suite

本页由 AI 翻译，技术细节请以原文为准。查看原文

0 stars 11 forks 质量 57 趋势 0

This project aims to provide a one-stop automated solution for Android APK security analysis and vulnerability detection.

概览

This project aims to provide a one-stop automated solution for Android APK security analysis and vulnerability detection. By integrating mainstream decompilation, static analysis, dynamic analysis and other tools such as JEB, JADX, APKTOOL, FlowDroid, MobSF, etc., and unifying them into MCP (Model Context Protocol) standard API interfaces, the automation and efficiency of security analysis are greatly improved. It is suitable for security researchers, penetration testers, developers and other users who have requirements for APK security. To avoid dependency conflicts in the global environment, it is highly recommended to use a Python virtual environment for managing project dependencies. Here are the detailed installation steps: 2. After confirming the virtual environment is activated (you should see (myenv) in your command prompt), install the project dependencies: 3. If you need to use MobSF related APIs, install Node.

README

以下为原文 README 节选，完整内容请查看原文。

🚦 APK Security Guard MCP Suite

📝 Project Introduction

🎬 Effect display

Waiting for the video to upload…

⚙️ Configuration Instructions

🧩 Install Dependencies

To avoid dependency conflicts in the global environment, it is highly recommended to use a Python virtual environment for managing project dependencies. Here are the detailed installation steps:

Create a new virtual environment:

# For Windows
python -m venv myenv
myenv\Scripts\activate

# For Linux/MacOS
python -m venv myenv
source myenv/bin/activate

After confirming the virtual environment is activated (you should see (myenv) in your command prompt), install the project dependencies:

pip install -r requirements.txt

If you need to use MobSF related APIs, install Node.js dependencies separately, navigate to the MobSF-MCP directory:

npm install -g mobsf-mcp

📝 Notes:

Python 3.11 is recommended

Remember to activate the virtual environment each time you start a new working session

📦 Plugin or Script Installation Recommendations

JEB MCP Script

The script needs to be placed in the scripts folder of the JEB tool in advance.

Open JEB and navigate to File > Scripts > Script Selector.
Select and run MCP.py from your script list.
If the script is loaded and running successfully, you should see the following messages in the JEB output console:

[MCP] Plugin loaded
[MCP] Plugin running
[MCP] Server started at http://localhost:16161

JADX MCP Plugin

Java 17 is required for building and running the plugin.
In the JADX-MCP root directory, run:
```
./gradlew build
```
After building, the plugin JAR will be generated at:
```
plugin/build/libs/JADX-MCP-Plugin.jar
```
Alternatively, you can directly use the pre-built JAR package: Download JADX-MCP-Plugin.jar
Copy the JAR file to the lib folder of your jadx-gui installation:
```
cp plugin/build/libs/JADX-MCP-Plugin.jar /lib/
```

APKTOOL

To install APKTool on Windows, you can use Chocolatey (a popular Windows package manager):

Open PowerShell as Administrator.

在 GitHub 查看完整 README

安装

npx mobsf-mcp

新手？先看 mcpskill.org 教程 →

配置

{
  "mcpServers": {
    "Jadx MCP Server": {
      "disabled": false,
      "timeout": 60,
      "command": "myenv\\Scripts\\python.exe",
      "args": [
        "JADX-MCP\\fastmcp_adapter.py"
      ],
      "transportType": "stdio"
    },
    "JEB MCP Server": {
      "disabled": false,
      "timeout": 1800,
      "command": "myenv\\Scripts\\python.exe",
      "args": [
        "JEB-MCP\\server.py"
      ],
      "transportType": "stdio"
    },
    "FlowDroid MCP Server": {
      "disabled": false,
      "timeout": 60,
      "command": "myenv\\Scripts\\python.exe",
      "args": [
        "FlowDroid-MCP\\script\\flowdroid_mcp.py"
      ],
      "transportType": "stdio"
    },
    "MobSF MCP Server": {
      "disabled": false,
      "timeout": 60,
      "command": "Nodejs\\node.exe",
      "args": [
        "MobSF-MCP\\build\\index.js"
      ],
      "env": {
        "MOBSF_URL": "http://localhost:8000",
        "MOBSF_API_KEY": "your_api_key_here"
      },
      "transportType": "stdio"
    },
    "APKTOOL MCP Server": {
      "disabled": false,
      "timeout": 60,
      "command": "myenv\\Scripts\\python.exe",
      "args": [
        "APKTOOL-MCP\\apktool_mcp_server.py"
      ],
      "transportType": "stdio"
    }
  }
}