Agent skill · security · aradotso
android-app-pentest-environment
Set up and use a complete Android app penetration testing environment in Android Studio with root, Magisk, Xposed, and traffic interception tools
Why this skill is useful
Adds executable scripts and detailed configurations for setting up a complete Android app penetration testing environment that aren't widely available in public documentation.
What it needs
Requires android studio installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Android App Penetration Testing Environment Skill by ara.so — Security Skills collection. This skill enables AI agents to help developers set up a complete Android application penetration testing environment using Android Studio emulators with root access, Magisk modules, SSL certificate management, and traffic interception capabilities. What This Project Provides A comprehensive guide and toolset for creating a 2026-ready Android app security testing environment including: Rooted Android emulator (API 36 / Android 16) Magisk (面具) for root management and module support SSL/TLS certificate bypasses for traffic interception Xposed framework integration Frida dynamic instrumentation setup BurpSuite/Charles proxy configuration Prerequisites Install Android Studio and SDK Configure Environment Variables macOS/Linux (bash): Windows (PowerShell): Verify ADB Installation Create Android Emulator Recommended Configuration Launch Emulator via CLI Install Magisk (Root Framework) Method A: rootAVD (Recommended - Automated) Method B: Manual Magisk Patching Verify Root Access Configure Magisk Install Magisk Modules LSPosed (Xposed Framework) SSL Certificate Unpinning Modules JustTrustMe: TrustMeAlready: MagiskTrustUserCerts SSL Certificate Installation Install BurpSuite/Charles Certificate Verify Certificate Installation Traffic Interception Setup Configure Proxy BurpSuite Configuration Test Traffic Capture Install Frida for Dynamic Analysis Install Frida Server Install Frida Tools (Host) Basic Frida Usage Common Commands Reference ADB Essentials File System Access Process and App Management Troubleshooting Emulator Won't Boot After Magisk ADB Not Detecting Emulator SSL Pinning Still Active Magisk Modules Not Working App Detects Emulator/Root Traffic Not Appearing in Proxy Advanced Patterns Automated APK Analysis Script Certificate Rotation Script Environment Variables Security Considerations This environment is for legal penetration testing only Always obtain proper authorization …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/android-app-pentest-environment