Agent skill · security · aradotso
jamboree-android-security-sandbox
Configure and orchestrate Android security testing environments with Magisk, Burp Suite, Objection, and rooted emulators for penetration testing.
Why this skill is useful
Adds executable scripts for configuring a comprehensive Android security testing environment with specific tools like Magisk and Burp Suite.
What it needs
Requires android-sdk, burpsuite, java, python3 installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
JAMBOREE Android Security Sandbox Skill Skill by ara.so — Security Skills collection Overview JAMBOREE (Java Android Magisk Burp Objection Root Emulator Easy) is a unified Android security testing framework that integrates: Magisk: Systemless root and module management Burp Suite: HTTPS traffic interception and analysis Objection: Frida-powered runtime instrumentation Rooted Emulator: Pre-configured Android Virtual Devices This skill enables AI agents to help developers configure, deploy, and use JAMBOREE for Android application security assessment, penetration testing, and reverse engineering. Installation Prerequisites Verification Before deployment, verify the environment has required dependencies: Core Installation Steps 1. Clone and Initialize 2. Deploy Core Components 3. Calibrate Settings Configuration Android Emulator Setup Create or modify an AVD for security testing: Magisk Module Configuration Deploy core modules for testing: Burp Suite Proxy Setup Configure system-wide traffic interception: Configuration file example (configurations/network/burp-proxy.conf): Objection Environment Install and configure Objection with Frida: Key Commands and Workflows Basic Application Analysis Objection Runtime Hooking Launch Objection against a running app: Common Objection commands in the interactive shell: Advanced Frida Scripts Custom hooking scripts in modules/objection/scripts/: hook-crypto.js - Monitor cryptographic operations: bypass-root-check.js - Defeat root detection: Load custom scripts: Burp Suite Automation Extend Burp with Python extensions in modules/burp/extensions/: auto-scanner.py - Automated endpoint discovery: Traffic Analysis Workflow Complete workflow for intercepting and analyzing app traffic: Common Patterns Pattern 1: API Endpoint Discovery and Analysis Pattern 2: Database Extraction and Analysis Pattern 3: Automated Certificate Pinning Bypass Create a persistent bypass module: Deploy automatically on app launch: Troubleshooting Issue: Certifica …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/jamboree-android-security-sandbox