Guys, I built a super fast Android decompiler called ASC. It completely replaced Jadx MCP for me and lets me analyze 10+ APKs in parallel. And this week my Agent use ASC found 2 RCE in Honor and Xiaomi! This tool now accepted by BlackHat EU Arsenal #BHEU

I tested on 50MB / 300MB APKs. global search string xrefs 50MB: 41x faster than jadx (ASC 493ms) 300MB: 269x faster than jadx (ASC 1.79s) Unlike Jadx or garlic, it doesn’t focus on exporting full pseudocode. It treats the APK itself as the source and lets you access it directly.

Feel free to try it out.

Great, definitely try it. But nowadays, modern applications are using the cross-platform framework; in such cases, the core application logic is in different parts, such as the React Native bundle file or, for Flutter, the file.

Added it here with reference to your paper

Are you one of the main maintainers of androguard? Thank you very much for your recognition. I'd like to ask whether ASC could become part of the androguard ecosystem?

Yes i'm the main one. I'm moving all stuff in rust right now, but it should be possible to use it in the current python code!

Congrats on Arsenal. If you’re taking feature requests: a '--json' mode for findrefs (dex, class, method, string, offset) would make this drop-in for MCP/agent tools.

I'm going to give this a shot. Looks amazing

Very nice! Can't wait to dig into

大佬牛逼 一会回去试试

이거 존나끝내줘 고마워 ㅋㅋ

支持跨平台吗

是的，我测试了是可以在win/linux/mac上用的，不过我看issue里有人提到python3.10不自带tk库，有可能gui会有些问题，所以可能要注意一下py版本最好在3.14及以上

酷，后面试试 接个AI应该可以自动化了

Nice tool, Will definitely use this...! One thing to ask, found 2 RCE in honor and xiaomi what...? like in their system app in their software, in their applications...?

Ok can you migrate it to another language and see if it’s faster? Python is slow right?

Thanks for your interest. Here is why the project uses Python: 1. Python is easy for Agents to modify. People can add features anytime and run them immediately, which suits fast iteration and CI pipelines. 2. ASC is already very fast thanks to algorithmic optimization, (1/2)

已经在用了，不错

感谢😃

Black Hat Arsenal: where making software easier to understand is somehow bad news for the software.

Awesome! Would love to see its MCP

不错不错，好东西

Solid

Neat

👀

How are you pulling apps for download

Parallel APK decomp finding RCEs is a strong BlackHat demo. Does ASC keep Jadx-level readability?

How'd you make it faster?

Part of it is due to algorithmic and feature advantages, but the bigger part is that the project chose to finely decompose the APK rather than fully preprocessing it. I'll explain the more specific details on site at Black Hat.

how you are guys fetching apk file any tool you guys are using