Apktool vs Avatar²

Apktool is a command-line tool for reverse engineering Android APK files. It can disassemble an app’s resources into a form close to their original structure, then rebuild an app after changes such as translation or permission edits. Its analysis mode attempts to extract resources and the manifest for inspection without rebuilding. Apktool runs on Windows, Linux, and macOS; its official installation guide describes wrapper-script steps for those systems and requires Java 8 or later. Decode options include choosing resource-resolution behavior, skipping resources or source disassembly, and setting a framework directory. Build options include selecting an aapt2 binary, adding a generic Network Security Configuration file, and disabling APK repacking. The Apache license permits redistribution, modification, and integration into another project. Apktool is free, with no pricing tiers stated. Its FAQ says Android devices are not officially supported, and some OEM-modified “Magic APKs” may not decode or build. Builds are unsigned; copying a signature retains only the original APK signature v1 scheme.

Avatar² is a free Python framework for dynamic analysis of embedded-device firmware. It coordinates targets, memory layouts and execution plans so firmware execution can be divided across multiple targets. Targets communicate through protocols with emulators, analysis frameworks or physical devices. The handbook documents GDB, OpenOCD, J-Link, QEMU and PANDA targets. OpenOCDTarget connects to physical targets over JTAG, while JLinkTarget supports SWD and JTAG. PANDA support includes recording and replaying execution and managing analysis plugins. Memory layouts define regions and rules for forwarding reads and writes between targets. The project documents installation through pip, from source or in Docker, where QEMU and PANDA are the defaults. It lists Linux support and ARM Cortex-M3 and x86-64 architectures. The README provides target build scripts for Ubuntu 20.04; other distributions are not officially supported, though they may work with modifications. The project uses the Apache-2.0 license and is maintained by EURECOM's Software and System Security Group. Maintainers direct users to a public mailing list and an invite-based Slack community.