jadx
jadx is a Dex-to-Java decompiler used to read Android APK and dex packages for security reviewers, and it is free under the Apache 2.0 license.
0 upvotes · 0 downvotes
No ratings yet
- Category
- Mobile Security
- Pricing
- Free
- Platforms
- LinuxWindowsmacOS
- License
- Open source
- Reviewed
- Last reviewed 3 October 2026
- Links
- GitHub
What it is
jadx produces Java source from Dalvik bytecode in APK, dex, aar, aab, and zip files, and it decodes AndroidManifest.xml and resources.arsc. It includes a command-line tool and a desktop GUI, and it also accepts jar, class, smali, arsc, xapk, and apkm files.
What it helps with
Reading the Java, the manifest, and the resources from one Android package. The GUI adds syntax highlighting, jump to declaration, find usage, full text search, a smali debugger, and a deobfuscator.
Who it's for
People reviewing Android apps on Windows, Linux, or macOS. It needs Java 11 or later, 64-bit, to run.
Worth knowing
In most cases it cannot decompile every method, so some output has errors.
Use Frida to hook a running app, and MobSF for an automated static and dynamic assessment.
Is there a project website besides GitHub?
No. GitHub is the project site.
Does it cover iOS?
No. It decompiles Android Dalvik packages, not iOS apps.
Is Apache 2.0 an OSI license?
Yes. The Open Source Initiative lists Apache 2.0.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.