skylot/jadxAndroid Dex 및 APK 파일을 읽을 수 있는 Java 소스 코드로 디컴파일하는 명령줄 및 GUI 도구입니다. 리소스 디코딩, 난독 해제 및 Smali 디버깅 기능을 제공합니다.
<img src="https://assets.kitploit.com/production/public/readmes/1311/0213b161fc92052b308f40d34d89590236aec9309953cb228fd4dc654452e11b.png" width="64" align="left" alt="jadx logo" />
## JADX
[](https://central.sonatype.com/namespace/io.github.skylot)
[](https://www.apache.org/licenses/LICENSE-2.0.html)
**jadx** - Dex to Java 디컴파일러
Android Dex 및 APK 파일에서 Java 소스 코드를 생성하기 위한 명령줄 및 GUI 도구
> [!WARNING]
> 대부분의 경우 **jadx**는 코드의 100%를 디컴파일할 수 없으므로 오류가 발생합니다.<br />
> 해결 방법은 [문제 해결 가이드](https://github.com/skylot/jadx/wiki/Troubleshooting-Q&A#decompilation-issues)를 확인하세요.
**주요 기능:**
- APK, dex, aab, apks, apkm, xapk 및 zip 파일에서 Dalvik 바이트코드를 Java 코드로 디컴파일
- Java 바이트코드(jar, class, aar) 및 smali 파일도 디컴파일
- `AndroidManifest.xml` 및 `resources.arsc`의 기타 리소스 디코딩
- 난독화 해제기 포함
**jadx-gui 기능:**
- 구문 강조와 함께 디컴파일된 코드 보기
- 선언으로 이동
- 사용처 찾기
- 전체 텍스트 검색
- smali 디버거, 설정 및 사용법은 [위키 페이지](https://github.com/skylot/jadx/wiki/Smali-debugger) 참조
jadx-gui의 키 바인딩은 [여기](https://github.com/skylot/jadx/wiki/JADX-GUI-Key-bindings)에서 확인할 수 있습니다
이러한 기능이 실제로 작동하는 모습은 여기에서 확인하세요: [jadx-gui 기능 개요](https://github.com/skylot/jadx/wiki/jadx-gui-features-overview)
<img src="https://assets.kitploit.com/production/public/readmes/1311/dd1c87c65c75e6dcbb1d6840bf420f1b8a7cbde33ed1e79ee4105f12b271d392.png" width="700" alt="jadx-gui screenshot"/>
### 다운로드
- 릴리스
[GitHub: ](https://github.com/skylot/jadx/releases/latest)에서
- 최신 [불안정 빌드 ](https://nightly.link/skylot/jadx/workflows/build-artifacts/master)
`jadx-<version>.zip`의 경우 압축을 풀고 `bin` 디렉터리로 이동한 후 실행하세요:
- `jadx` - 명령줄 버전
- `jadx-gui` - GUI 버전
Windows에서는 `.bat` 파일을 두 번 클릭하여 실행하세요.
Windows 번들의 경우 압축을 풀고 `jadx-gui-<version>.exe`를 실행하세요.
**참고:** 64비트 Java 11 이상이 설치되어 있어야 합니다(`with-jre` 번들에는 필요하지 않음).
Windows의 경우 [oracle.com](https://www.oracle.com/java/technologies/downloads/#jdk25-windows)에서 다운로드할 수 있습니다(x64 Installer 선택).
### 설치
- Arch Linux
[](https://archlinux.org/packages/extra/any/jadx/)
[](https://aur.archlinux.org/packages/jadx-git)
```bash
sudo pacman -S jadx
```
- macOS
[](https://formulae.brew.sh/formula/jadx)
```bash
brew install jadx
```
- Flathub
[](https://flathub.org/apps/com.github.skylot.jadx)
```bash
flatpak install flathub com.github.skylot.jadx
```
### 사용법
```
jadx[-gui] [command] [options] <input files> (.apk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .xapk, .apkm, .apks, .jadx.kts)
commands (use '<command> --help' for command options):
plugins - manage jadx plugins
options:
-d, --output-dir - output directory
-ds, --output-dir-src - output directory for sources
-dr, --output-dir-res - output directory for resources
-r, --no-res - do not decode resources
-s, --no-src - do not decompile source code
-j, --threads-count - processing threads count, default: half of CPU threads
--single-class - decompile a single class, full name, raw or alias
--single-class-output - file or dir for write if decompile a single class
--output-format - can be 'java' or 'json', default: java
-e, --export-gradle - save as gradle project (set '--export-gradle-type' to 'auto')
--export-gradle-type - Gradle project template for export:
'auto' - detect automatically
'android-app' - Android Application (apk)
'android-library' - Android Library (aar)
'simple-java' - simple Java
-m, --decompilation-mode - code output mode:
'auto' - trying best options (default)
'restructure' - restore code structure (normal java code)
'simple' - simplified instructions (linear, with goto's)
'fallback' - raw instructions without modifications
--show-bad-code - show inconsistent code (incorrectly decompiled)
--no-xml-pretty-print - do not prettify XML
--no-imports - disable use of imports, always write entire package name
--no-debug-info - disable debug info parsing and processing
--add-debug-lines - add comments with debug line numbers if available
--no-inline-anonymous - disable anonymous classes inline
--no-inline-methods - disable methods inline
--no-move-inner-classes - disable move inner classes into parent
--no-inline-kotlin-lambda - disable inline for Kotlin lambdas
--no-finally - don't extract finally block
--no-restore-switch-over-string - don't restore switch over string
--no-replace-consts - don't replace constant value with matching constant field
--escape-unicode - escape non latin characters in strings (with \u)
--respect-bytecode-access-modifiers - don't change original access modifiers
--mappings-path - deobfuscation mappings file or directory. Allowed formats: Tiny and Tiny v2 (both '.tiny'), Enigma (.mapping) or Enigma directory
--mappings-mode - set mode for handling the deobfuscation mapping file:
'read' - just read, user can always save manually (default)
'read-and-autosave-every-change' - read and autosave after every change
'read-and-autosave-before-closing' - read and autosave before exiting the app or closing the project
'ignore' - don't read or save (can be used to skip loading mapping files referenced in the project file)
--deobf - activate deobfuscation
--deobf-min - min length of name, renamed if shorter, default: 3
--deobf-max - max length of name, renamed if longer, default: 64
--deobf-whitelist - space separated list of classes (full name) and packages (ends with '.*') to exclude from deobfuscation, default: android.support.v4.* android.support.v7.* android.support.v4.os.* android.support.annotation.Px androidx.core.os.* androidx.annotation.Px
--deobf-cfg-file - deobfuscation mappings file used for JADX auto-generated names (in the JOBF file format), default: same dir and name as input file with '.jobf' extension
--deobf-cfg-file-mode - set mode for handling the JADX auto-generated names' deobfuscation map file:
'read' - read if found, don't save (default)
'read-or-save' - read if found, save otherwise (don't overwrite)
'overwrite' - don't read, always save
'ignore' - don't read and don't save
--deobf-res-name-source - better name source for resources:
'auto' - automatically select best name (default)
'resources' - use resources names
'code' - use R class fields names
--use-source-name-as-class-name-alias - use source name as class name alias:
'always' - always use source name if it's available
'if-better' - use source name if it seems better than the current one
'never' - never use source name, even if it's available
--source-name-repeat-limit - allow using source name if it appears less than a limit number, default: 10
--use-kotlin-methods-for-var-names - use kotlin intrinsic methods to rename variables, values: disable, apply, apply-and-hide, default: apply
--use-headers-for-detect-resource-extensions - Use headers for detect resource extensions if resource obfuscated
--rename-flags - fix options (comma-separated list of):
'case' - fix case sensitivity issues (according to --fs-case-sensitive option),
'valid' - rename java identifiers to make them valid,
'printable' - remove non-printable chars from identifiers,
or single 'none' - to disable all renames
or single 'all' - to enable all (default)
--integer-format - how integers are displayed:
'auto' - automatically select (default)
'decimal' - use decimal
'hexadecimal' - use hexadecimal
--type-update-limit - type update limit count (per one instruction), default: 10
--fs-case-sensitive - treat filesystem as case sensitive, false by default
--cfg - save methods control flow graph to dot file
--raw-cfg - save methods control flow graph (use raw instructions)
--call-graph - save app call graph in format: 'dot' or 'json', default: none
-f, --fallback - set '--decompilation-mode' to 'fallback' (deprecated)
--use-dx - use dx/d8 to convert java bytecode
--comments-level - set code comments level, values: error, warn, info, debug, user-only, none, default: info
--log-level - set log level, values: quiet, progress, error, warn, info, debug, default: progress
-v, --verbose - verbose output (set --log-level to DEBUG)
-q, --quiet - turn off output (set --log-level to QUIET)
--disable-plugins - comma separated list of plugin ids to disable
--config <config-ref> - load configuration from file, <config-ref> can be:
path to '.json' file
short name - uses file with this name from config directory
'none' - to disable config loading
--save-config <config-ref> - save current options into configuration file and exit, <config-ref> can be:
empty - for default config
path to '.json' file
short name - file will be saved in config directory
--print-files - print files and directories used by jadx (config, cache, temp)
--version - print jadx version
-h, --help - print this help
Plugin options (-P<name>=<value>):
dex-input: Load .dex and .apk files
- dex-input.verify-checksum - verify dex file checksum before load, values: [yes, no], default: yes
java-convert: Convert .class, .jar and .aar files to dex
- java-convert.mode - convert mode, values: [dx, d8, both], default: both
- java-convert.d8-desugar - use desugar in d8, values: [yes, no], default: no
kotlin-metadata: Use kotlin.Metadata annotation for code generation
- kotlin-metadata.class-alias - rename class alias, values: [yes, no], default: yes
- kotlin-metadata.method-args - rename function arguments, values: [yes, no], default: yes
- kotlin-metadata.fields - rename fields, values: [yes, no], default: yes
- kotlin-metadata.companion - rename companion object, values: [yes, no], default: yes
- kotlin-metadata.data-class - add data class modifier, values: [yes, no], default: yes
- kotlin-metadata.to-string - rename fields using toString, values: [yes, no], default: yes
- kotlin-metadata.getters - rename simple getters to field names, values: [yes, no], default: yes
kotlin-smap: Use kotlin.SourceDebugExtension annotation for rename class alias
- kotlin-smap.class-alias-source-dbg - rename class alias from SourceDebugExtension, values: [yes, no], default: no
rename-mappings: various mappings support
- rename-mappings.format - mapping format, values: [AUTO, TINY_FILE, TINY_2_FILE, ENIGMA_FILE, ENIGMA_DIR, PROGUARD_FILE, SRG_FILE, XSRG_FILE, JAM_FILE, CSRG_FILE, TSRG_FILE, TSRG_2_FILE, INTELLIJ_MIGRATION_MAP_FILE, RECAF_SIMPLE_FILE, JOBF_FILE], default: AUTO
- rename-mappings.invert - invert mapping on load, values: [yes, no], default: no
smali-input: Load .smali files
- smali-input.api-level - Android API level, default: 27
Environment variables:
JADX_DISABLE_XML_SECURITY - set to 'true' to disable all security checks for XML files
JADX_DISABLE_ZIP_SECURITY - set to 'true' to disable all security checks for zip files
JADX_DISABLE_ALL_SECURITY_FLAGS - set to 'true' to disable all security flags (xml, string, app package)
JADX_ZIP_MAX_ENTRIES_COUNT - maximum allowed number of entries in zip files (default: 100 000)
JADX_ZIP_BOMB_MIN_UNCOMPRESSED_SIZE - min size of zip entry to check compression ratio, in bytes (default: 25 MB)
JADX_ZIP_BOMB_DETECTION_FACTOR - maximum allowed compression ratio of zip entry (default: 100)
JADX_CONFIG_DIR - custom config directory, using system by default
JADX_CACHE_DIR - custom cache directory, using system by default
JADX_TMP_DIR - custom temp directory, using system by default
Examples:
jadx -d out classes.dex
jadx --rename-flags "none" classes.dex
jadx --rename-flags "valid, printable" classes.dex
jadx --log-level ERROR app.apk
jadx -Pdex-input.verify-checksum=no app.apk
```
이 옵션들은 명령줄에서 jadx-gui를 실행할 때도 작동하며, 기본 설정 대화상자의 옵션을 재정의합니다
`plugins` 명령 사용법
```
usage: plugins [options]
options:
-i, --install <locationId> - install plugin with locationId
-j, --install-jar <path-to.jar> - install plugin from jar file
-l, --list - list installed plugins
-a, --available - list available plugins from jadx-plugins-list (aka marketplace)
-u, --update - update installed plugins
--uninstall <pluginId> - uninstall plugin with pluginId
--disable <pluginId> - disable plugin with pluginId
--enable <pluginId> - enable plugin with pluginId
--list-all - list all plugins including bundled and dropins
--list-versions <locationId> - fetch latest versions of plugin from locationId (will download all artefacts, limited to 10)
-h, --help - print this help
```
### 라이브러리로 jadx 사용
Java 프로젝트에서 jadx를 사용할 수 있습니다. 자세한 내용은 [위키 페이지](https://github.com/skylot/jadx/wiki/Use-jadx-as-a-library)를 참조하세요
### 소스에서 빌드
JDK 17 이상이 설치되어 있어야 합니다:
```
git clone https://github.com/skylot/jadx.git
cd jadx
./gradlew dist
```
(Windows에서는 `./gradlew` 대신 `gradlew.bat`을 사용하세요)
jadx를 실행하기 위한 스크립트는 `build/jadx/bin`에 배치되며
`build/jadx-<version>.zip`에도 함께 패키징됩니다
### 문제 해결
위키 페이지 [문제 해결 Q&A](https://github.com/skylot/jadx/wiki/Troubleshooting-Q&A)를 확인하세요
### 기여
이 프로젝트를 지원하려면 다음을 할 수 있습니다:
- 중요하다고 생각하는 새로운 기능/최적화에 대한 의견 게시
- 디컴파일 문제 제출(먼저 [이슈를 여는 방법](https://github.com/skylot/jadx/blob/master/CONTRIBUTING.md#Open-Issue)을 읽어주세요)
- 풀 리퀘스트 열기([풀 리퀘스트 규칙](https://github.com/skylot/jadx/blob/master/CONTRIBUTING.md#Pull-Request-Process)을 따라주세요)
---------------------------------------
*Apache 2.0 라이선스에 따라 라이선스가 부여됩니다*