Agent skill · security · aradotso

android-pentest-environment-setup

Complete Android app penetration testing environment setup with Android Studio, rooted emulator, Magisk, and reverse engineering tools

Why this skill is useful

Provides a complete setup guide with executable scripts and configurations for a modern Android penetration testing environment that the AI cannot generate on its own.

What it needs

Requires android-studio, burp-suite, mitmproxy installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.

What this skill does

Android Penetration Testing Environment Setup Skill by ara.so — Security Skills collection. This skill covers setting up a complete Android application penetration testing environment using Android Studio emulators, including rooting with Magisk, installing security testing frameworks (Frida, LSPosed), and configuring traffic interception tools. What This Project Provides A comprehensive guide to building a modern (2026) Android app penetration testing lab environment on Android Studio, including: Android Studio AVD (Android Virtual Device) configuration optimized for security testing Root access via Magisk framework Frida dynamic instrumentation framework LSPosed/Xposed module framework for runtime hooking SSL/TLS certificate pinning bypass capabilities Traffic interception setup with Burp Suite/mitmproxy Anti-emulator detection bypass techniques Key Advantages: Reproducible environment using snapshots No need for physical devices Full system access for deep analysis Support for Android 16 (API 36) Limitations: Some apps detect emulators and refuse to run Performance may be slower than physical devices Prerequisites macOS, Linux, or Windows 16GB+ RAM recommended Android Studio installed Proxy tool (Burp Suite, mitmproxy, Charles) for traffic analysis Installation 1. Install Android Studio and SDK Windows PowerShell: 2. Create Android Virtual Device (AVD) Important: Choose Google APIs (NOT Google Play) to allow root access. 3. Root with Magisk (Method A: rootAVD - Recommended) 4. Root with Magisk (Method B: Manual Patch - If rootAVD Fails) Key Commands ADB (Android Debug Bridge) Magisk Module Management Installing Security Testing Frameworks 1. Install Frida Persistent Frida with Magisk Module: 2. Install LSPosed (Xposed Framework) Common LSPosed Modules for Pentesting: 3. …

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills aradotso/android-pentest-environment-setup

View the source on GitHub

Browse the @skills marketplace