Agent skill · security · aradotso
android-studio-pentest-environment
Set up a complete Android app penetration testing environment using Android Studio emulators with Magisk root, Frida, HTTP Toolkit, and LSPosed modules
Why this skill is useful
Adds detailed executable scripts and configurations for setting up a comprehensive Android penetration testing environment that the AI wouldn't generate on its own.
What it needs
Requires android-studio installed locally. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Android Studio Pentest Environment Setup Skill by ara.so — Security Skills collection. This skill provides expertise in setting up a complete Android application penetration testing environment using Android Studio Virtual Device Manager (AVD) with root access via Magisk, Frida dynamic instrumentation, HTTP Toolkit for traffic interception, and LSPosed modules for runtime manipulation. What This Project Does This project guides you through building a 2026-ready Android app penetration testing lab that includes: Android Studio AVD with Google APIs (API 36/Android 16) Magisk (root) via rootAVD automation Frida for dynamic instrumentation HTTP Toolkit for HTTPS traffic interception LSPosed with TrustMeAlready and JustTrustMe modules for SSL pinning bypass Shamiko for root hiding ZygiskNext as modern Zygisk replacement Prerequisites Install Android Studio and SDK Apply the configuration: Create Android Virtual Device Root the Emulator with Magisk Method A: rootAVD (Recommended) Method B: Manual Magisk Patch (Fallback) Configure Magisk Install Frida Frida Server on Device Frida Tools on Host Frida Usage Examples Install LSPosed and Modules Install LSPosed (Zygisk version) Upgrade to ZygiskNext Install TrustMeAlready (SSL Pinning Bypass) Install JustTrustMe (Alternative) HTTP Traffic Interception Method A: HTTP Toolkit Method B: Manual Proxy Setup Install Shamiko (Root Hiding) Testing and Verification Verify Root Status Verify Frida Verify SSL Pinning Bypass Common Patterns Install APK and Analyze Hook Function with Frida Bypass Root Detection Extract Secrets from Memory Troubleshooting Magisk Not Showing Root Frida Server Crashes LSPosed Not Working SSL Pinning Bypass Not Working Emulator Boot Loop After Root ADB Not Finding Device Environment Variables Always use environment variables for sensitive configuration: References Android Studio: https://developer.android.com/studio rootAVD: https://gitlab.com/newbit/rootAVD Magisk: https://github.com/topjohnwu/Magisk Frida: h …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/android-studio-pentest-environment