Agent skill · security · aradotso
androidstudio-app-pentest-environment
Android Studio mobile application penetration testing environment setup with Magisk root, Frida, and SSL bypass capabilities
Why this skill is useful
Adds executable scripts and detailed setup instructions for creating a rooted Android pentesting environment that the AI wouldn't generate on its own.
What it needs
Requires android studio, burp suite, charles, git, mitmproxy installed locally. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Android Studio App Pentest Environment Setup Skill by ara.so — Security Skills collection. Complete penetration testing environment for Android applications using Android Studio emulators with Magisk root, Frida instrumentation, SSL/TLS bypass, and security testing tools. What This Project Provides A comprehensive guide and toolchain for setting up a mobile application security testing environment including: Rooted Android Emulator: Using Magisk (面具) for root access Frida Framework: Dynamic instrumentation for runtime analysis SSL/TLS Bypass: Certificate pinning bypass modules Traffic Interception: Proxy configuration for HTTPS inspection Anti-Detection: Modules to hide root, Magisk, and emulator detection Prerequisites Android Studio: Latest version from developer.android.com SDK Platform-Tools: ADB and fastboot (installed with Android Studio) Proxy Tool: Burp Suite, Charles, or mitmproxy Git: For cloning tooling repositories Environment Setup 1. Install Android Studio and SDK 2. Create Android Virtual Device (AVD) 3. Root with Magisk (Method A: rootAVD - Recommended) 4. Root with Magisk (Method B: Manual Patch) Magisk Configuration Install ZygiskNext (Improved Zygisk) Install Shamiko (Hide Magisk from Detection) Install LSPosed Framework Install Frida SSL/TLS Certificate Pinning Bypass Method 1: HTTP Toolkit Module Method 2: Frida Script (Universal SSL Pinning Bypass) Method 3: JustTrustMe (LSPosed Module) Install System CA Certificate Common Frida Scripts List Installed Packages Hook Method to Bypass Root Detection Dump App Memory Intercept Crypto Operations ADB Commands Reference Troubleshooting Emulator Won't Start ADB Not Detecting Device Magisk Not Working After Reboot Frida Server Connection Failed SSL Pinning Still Active App Crashes on Launch Best Practices 1. Always create snapshots before making major changes to AVD 2. Use Cold Boot for Magisk to load properly 3. Keep Magisk and modules updated for latest bypass techniques 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/androidstudio-app-pentest-environment