novahiz 0.2.2 → 0.2.5

package/bundled-skills/android-reverse-engineering/references/setup-guide.md

@@ -1,221 +0,0 @@
-# Setup Guide: Dependencies for Android Reverse Engineering
-
-## Java JDK 17+
-
-jadx requires Java 17 or later.
-
-### Ubuntu / Debian
-
-```bash
-sudo apt update
-sudo apt install openjdk-17-jdk
-```
-
-### Fedora
-
-```bash
-sudo dnf install java-17-openjdk-devel
-```
-
-### Arch Linux
-
-```bash
-sudo pacman -S jdk17-openjdk
-```
-
-### macOS (Homebrew)
-
-```bash
-brew install openjdk@17
-```
-
-After installation on macOS, follow the symlink instructions printed by Homebrew, or add to your shell profile:
-
-```bash
-export PATH="/opt/homebrew/opt/openjdk@17/bin:$PATH"
-```
-
-### Verify
-
-```bash
-java -version
-# Should show version 17.x or higher
-```
-
----
-
-## jadx
-
-jadx is the Java decompiler used to convert APK/JAR/AAR files to readable Java source.
-
-### Option 1: GitHub Releases (recommended)
-
-1. Go to <https://github.com/skylot/jadx/releases/latest>
-2. Download the `jadx-<version>.zip` file (not the source archive)
-3. Extract and add to PATH:
-
-```bash
-unzip jadx-*.zip -d ~/jadx
-export PATH="$HOME/jadx/bin:$PATH"
-# Add the export line to your ~/.bashrc or ~/.zshrc for persistence
-```
-
-### Option 2: Homebrew (macOS / Linux)
-
-```bash
-brew install jadx
-```
-
-### Option 3: Build from source
-
-```bash
-git clone https://github.com/skylot/jadx.git
-cd jadx
-./gradlew dist
-# Binaries will be in build/jadx/bin/
-export PATH="$(pwd)/build/jadx/bin:$PATH"
-```
-
-### Verify
-
-```bash
-jadx --version
-```
-
----
-
-## Fernflower / Vineflower (optional, recommended)
-
-Fernflower is the JetBrains Java decompiler. It produces better output than jadx on complex Java constructs, lambdas, and generics. [Vineflower](https://github.com/Vineflower/vineflower) is the actively maintained community fork with published releases — prefer it over upstream Fernflower.
-
-### Option 1: Vineflower from GitHub Releases (recommended)
-
-1. Go to <https://github.com/Vineflower/vineflower/releases/latest>
-2. Download `vineflower-<version>.jar`
-3. Place it and set the environment variable:
-
-```bash
-mkdir -p ~/vineflower
-mv vineflower-*.jar ~/vineflower/vineflower.jar
-export FERNFLOWER_JAR_PATH="$HOME/vineflower/vineflower.jar"
-# Add the export to ~/.bashrc or ~/.zshrc for persistence
-```
-
-### Option 2: Build Fernflower from source
-
-```bash
-git clone https://github.com/JetBrains/fernflower.git
-cd fernflower
-./gradlew jar
-# Produces: build/libs/fernflower.jar
-export FERNFLOWER_JAR_PATH="$(pwd)/build/libs/fernflower.jar"
-```
-
-### Option 3: Homebrew (Vineflower)
-
-```bash
-brew install vineflower
-```
-
-### Verify
-
-```bash
-java -jar "$FERNFLOWER_JAR_PATH" --version
-```
-
-> **Note**: Fernflower only works on JVM bytecode (JAR, class files). For APK/DEX files, you also need **dex2jar** (see below) as an intermediate conversion step.
-
----
-
-## dex2jar (optional, needed for Fernflower on APK files)
-
-Converts Android DEX bytecode to standard Java JAR files.
-
-### GitHub Releases
-
-1. Go to <https://github.com/ThexXTURBOXx/dex2jar/releases/latest>
-2. Download and extract:
-
-```bash
-unzip dex-tools-*.zip -d ~/dex2jar
-export PATH="$HOME/dex2jar:$PATH"
-```
-
-### Homebrew
-
-```bash
-brew install dex2jar
-```
-
-### Verify
-
-```bash
-d2j-dex2jar --help
-```
-
-### Usage
-
-```bash
-# Convert APK (or DEX) to JAR
-d2j-dex2jar -f -o output.jar app.apk
-
-# Then decompile with Fernflower
-java -jar vineflower.jar output.jar decompiled/
-```
-
----
-
-## Optional Tools
-
-### apktool
-
-Useful for decoding resources (XML layouts, drawables) that jadx sometimes handles poorly.
-
-```bash
-# Ubuntu/Debian
-sudo apt install apktool
-
-# macOS
-brew install apktool
-
-# Manual: https://apktool.org/docs/install
-```
-
-### adb (Android Debug Bridge)
-
-Useful for pulling APKs directly from a connected Android device.
-
-```bash
-# Ubuntu/Debian
-sudo apt install adb
-
-# macOS
-brew install android-platform-tools
-```
-
-Pull an APK from a device:
-
-```bash
-# List installed packages
-adb shell pm list packages | grep <keyword>
-
-# Get APK path
-adb shell pm path com.example.app
-
-# Pull the APK
-adb pull /data/app/com.example.app-xxxx/base.apk ./app.apk
-```
-
----
-
-## Troubleshooting
-
-| Problem | Solution |
-|---|---|
-| `jadx: command not found` | Ensure the jadx `bin/` directory is in your `$PATH` |
-| `Error: Could not find or load main class` | Java is missing or wrong version — verify with `java -version` |
-| jadx runs out of memory on large APKs | Increase heap: `jadx -Xmx4g -d output app.apk` or set `JAVA_OPTS="-Xmx4g"` |
-| Decompiled code has many `// Error` comments | Try `--show-bad-code` to see partial output, or use `--deobf` for obfuscated apps |
-| Fernflower hangs on a method | Use `-mpm=60` to set a 60-second timeout per method |
-| Fernflower JAR not found | Set `FERNFLOWER_JAR_PATH` env variable to the full path of the JAR |
-| dex2jar fails with `ZipException` | The APK may have a non-standard ZIP structure — try `jadx` instead |

package/bundled-skills/android-reverse-engineering/references/third_party_hosts.txt

@@ -1,122 +0,0 @@
-# Third-party host denylist used by find-api-calls.sh --urls.
-#
-# Patterns are extended-regex hostname suffixes / fragments. A host is
-# considered "third-party noise" if any pattern below matches anywhere
-# in the hostname. Lines starting with '#' and blank lines are ignored.
-#
-# This list is intentionally conservative: when a pattern would hide a
-# legitimate first-party host (e.g. an app may run its own *.s3.amazonaws.com
-# bucket), keep the pattern but expect manual review of the bucketed output.
-
-# Google / Firebase / Play / Crashlytics
-\.googleapis\.com$
-\.google\.com$
-\.gstatic\.com$
-\.googleusercontent\.com$
-\.googletagmanager\.com$
-\.googlesyndication\.com$
-\.firebaseio\.com$
-\.firebaseapp\.com$
-\.firebaseinstallations\.googleapis\.com$
-\.firebaseremoteconfig\.googleapis\.com$
-\.crashlytics\.com$
-\.app-measurement\.com$
-
-# Apple / Microsoft / Adobe
-\.apple\.com$
-\.icloud\.com$
-\.microsoft\.com$
-\.live\.com$
-\.office\.com$
-\.adobe\.com$
-ns\.adobe\.com
-
-# Meta
-\.facebook\.com$
-\.fbcdn\.net$
-\.instagram\.com$
-\.whatsapp\.com$
-
-# Other social / messaging / video
-\.twitter\.com$
-\.x\.com$
-\.tiktok\.com$
-\.youtube\.com$
-\.youtu\.be$
-\.linkedin\.com$
-\.snapchat\.com$
-\.pinterest\.com$
-\.reddit\.com$
-
-# Mobile attribution / analytics / observability
-\.appsflyersdk\.com$
-\.appsflyer\.com$
-\.adjust\.com$
-\.branch\.io$
-\.amplitude\.com$
-\.segment\.com$
-\.mixpanel\.com$
-\.hotjar\.com$
-\.clarity\.ms$
-\.datadoghq\.(com|eu|us)$
-\.sentry\.io$
-\.bugsnag\.com$
-\.newrelic\.com$
-\.instabug\.com$
-\.embrace\.io$
-\.rollout\.io$
-\.launchdarkly\.com$
-
-# Push / notifications
-\.onesignal\.com$
-\.urbanairship\.com$
-\.airship\.com$
-
-# Support / chat
-\.zendesk\.com$
-\.intercom\.io$
-\.intercomcdn\.com$
-\.helpshift\.com$
-\.salesforce\.com$
-\.freshchat\.com$
-\.kustomerapp\.com$
-
-# Payments
-\.stripe\.com$
-\.braintreepayments\.com$
-\.braintreegateway\.com$
-\.payu\.com$
-\.payu\.in$
-\.paypal\.com$
-\.adyen\.com$
-\.checkout\.com$
-\.klarna\.com$
-
-# Maps / location
-\.mapbox\.com$
-\.openstreetmap\.org$
-
-# Storage / CDN (often third-party even when the bucket name is app-specific)
-\.s3\.amazonaws\.com$
-\.cloudfront\.net$
-\.akamaihd\.net$
-\.akamaized\.net$
-\.fastly\.net$
-\.cloudflare\.com$
-\.azureedge\.net$
-
-# DNS / well-known infra
-\.localhost$
-^localhost
-^127\.
-
-# Standards / RFCs / placeholders that show up as XML/XMP namespaces
-\.w3\.org$
-\.w3c\.org$
-example\.(com|org|net)$
-
-# Certificate authorities
-\.sectigo\.com$
-\.entrust\.com$
-\.digicert\.com$
-\.letsencrypt\.org$

package/bundled-skills/android-reverse-engineering/scripts/check-deps.ps1

@@ -1,165 +0,0 @@
-# check-deps.ps1 — Verify dependencies and report what's missing
-# Output includes machine-readable INSTALL_REQUIRED/INSTALL_OPTIONAL lines.
-$ErrorActionPreference = 'Stop'
-
-# Refresh PATH from user environment so we pick up tools installed in the same session
-$userPath = [Environment]::GetEnvironmentVariable('PATH', 'User')
-if ($userPath) {
-    foreach ($dir in $userPath -split ';') {
-        if ($dir -and $env:PATH -notlike "*$dir*") {
-            $env:PATH = "$dir;$env:PATH"
-        }
-    }
-}
-
-$REQUIRED_JAVA_MAJOR = 17
-$errors = 0
-$missingRequired = @()
-$missingOptional = @()
-
-Write-Host "=== Android Reverse Engineering: Dependency Check ==="
-Write-Host ""
-
-# --- Java ---
-$javaOk = $false
-$javaBin = Get-Command java -ErrorAction SilentlyContinue
-if ($javaBin) {
-    $javaVersionOutput = & java -version 2>&1 | Select-Object -First 1
-    $javaVersionStr = "$javaVersionOutput"
-    if ($javaVersionStr -match '"(\d+)') {
-        $javaVersion = [int]$Matches[1]
-        if ($javaVersion -eq 1 -and $javaVersionStr -match '"1\.(\d+)') {
-            $javaVersion = [int]$Matches[1]
-        }
-        if ($javaVersion -ge $REQUIRED_JAVA_MAJOR) {
-            Write-Host "[OK] Java $javaVersion detected"
-            $javaOk = $true
-        } else {
-            Write-Host "[WARN] Java detected but version $javaVersion is below $REQUIRED_JAVA_MAJOR"
-            $errors++
-            $missingRequired += "java"
-        }
-    } else {
-        Write-Host "[WARN] Java detected but could not parse version from: $javaVersionStr"
-        $errors++
-        $missingRequired += "java"
-    }
-} else {
-    Write-Host "[MISSING] Java is not installed or not in PATH"
-    $errors++
-    $missingRequired += "java"
-}
-
-# --- jadx ---
-$jadxBin = Get-Command jadx -ErrorAction SilentlyContinue
-if (-not $jadxBin) {
-    # Check common Windows install locations
-    $jadxCandidates = @(
-        "$env:USERPROFILE\.local\share\jadx\bin\jadx.bat",
-        "$env:USERPROFILE\jadx\bin\jadx.bat",
-        "$env:LOCALAPPDATA\jadx\bin\jadx.bat"
-    )
-    foreach ($c in $jadxCandidates) {
-        if (Test-Path $c) {
-            $jadxBin = $c
-            break
-        }
-    }
-}
-if ($jadxBin) {
-    try {
-        $jadxCmd = if ($jadxBin -is [string]) { $jadxBin } else { 'jadx' }
-        $jadxVersion = & $jadxCmd --version 2>$null
-        Write-Host "[OK] jadx $jadxVersion detected"
-    } catch {
-        Write-Host "[OK] jadx detected"
-    }
-} else {
-    Write-Host "[MISSING] jadx is not installed or not in PATH"
-    $errors++
-    $missingRequired += "jadx"
-}
-
-# --- Fernflower / Vineflower ---
-$ffFound = $false
-$vineflowerBin = Get-Command vineflower -ErrorAction SilentlyContinue
-$fernflowerBin = Get-Command fernflower -ErrorAction SilentlyContinue
-if ($vineflowerBin) {
-    Write-Host "[OK] vineflower CLI detected"
-    $ffFound = $true
-} elseif ($fernflowerBin) {
-    Write-Host "[OK] fernflower CLI detected"
-    $ffFound = $true
-} else {
-    $ffCandidates = @(
-        $env:FERNFLOWER_JAR_PATH,
-        "$env:USERPROFILE\.local\share\vineflower\vineflower.jar",
-        "$env:USERPROFILE\fernflower\build\libs\fernflower.jar",
-        "$env:USERPROFILE\vineflower\build\libs\vineflower.jar",
-        "$env:USERPROFILE\fernflower\fernflower.jar",
-        "$env:USERPROFILE\vineflower\vineflower.jar"
-    )
-    foreach ($candidate in $ffCandidates) {
-        if ($candidate -and (Test-Path $candidate -ErrorAction SilentlyContinue)) {
-            Write-Host "[OK] Fernflower/Vineflower JAR found: $candidate"
-            $ffFound = $true
-            break
-        }
-    }
-}
-if (-not $ffFound) {
-    Write-Host "[MISSING] Fernflower/Vineflower not found (optional - better output on complex Java code)"
-    $missingOptional += "vineflower"
-}
-
-# --- dex2jar ---
-$d2jBin = Get-Command d2j-dex2jar -ErrorAction SilentlyContinue
-if (-not $d2jBin) {
-    $d2jBin = Get-Command d2j-dex2jar.bat -ErrorAction SilentlyContinue
-}
-if ($d2jBin) {
-    Write-Host "[OK] dex2jar detected"
-} else {
-    Write-Host "[MISSING] dex2jar not found (optional - needed to use Fernflower on APK/DEX files)"
-    $missingOptional += "dex2jar"
-}
-
-# --- Optional: apktool ---
-if (Get-Command apktool -ErrorAction SilentlyContinue) {
-    Write-Host "[OK] apktool detected (optional)"
-} else {
-    Write-Host "[MISSING] apktool not found (optional - useful for resource decoding)"
-    $missingOptional += "apktool"
-}
-
-# --- Optional: adb ---
-if (Get-Command adb -ErrorAction SilentlyContinue) {
-    Write-Host "[OK] adb detected (optional)"
-} else {
-    Write-Host "[MISSING] adb not found (optional - useful for pulling APKs from devices)"
-    $missingOptional += "adb"
-}
-
-# --- Machine-readable summary ---
-Write-Host ""
-foreach ($dep in $missingRequired) {
-    Write-Host "INSTALL_REQUIRED:$dep"
-}
-foreach ($dep in $missingOptional) {
-    Write-Host "INSTALL_OPTIONAL:$dep"
-}
-
-Write-Host ""
-if ($errors -gt 0) {
-    Write-Host "*** $($missingRequired.Count) required dependency/ies missing. ***"
-    Write-Host "Run install-dep.ps1 <name> to install, or see references/setup-guide.md."
-    exit 1
-} else {
-    if ($missingOptional.Count -gt 0) {
-        Write-Host "Required dependencies OK. $($missingOptional.Count) optional dependency/ies missing."
-        Write-Host "Run install-dep.ps1 <name> to install optional tools."
-    } else {
-        Write-Host "All dependencies are installed. Ready to decompile."
-    }
-    exit 0
-}

package/bundled-skills/android-reverse-engineering/scripts/check-deps.sh

@@ -1,129 +0,0 @@
-#!/usr/bin/env bash
-# check-deps.sh — Verify dependencies and report what's missing
-# Output includes machine-readable INSTALL:<dep> lines for each missing dependency.
-# The install-dep.sh script can install each one.
-set -euo pipefail
-
-REQUIRED_JAVA_MAJOR=17
-errors=0
-missing_required=()
-missing_optional=()
-
-echo "=== Android Reverse Engineering: Dependency Check ==="
-echo
-
-# --- Java ---
-java_ok=false
-if command -v java &>/dev/null; then
-  java_version_output=$(java -version 2>&1 | head -1)
-  java_version=$(echo "$java_version_output" | sed -n 's/.*"\([0-9]*\)\..*/\1/p')
-  if [[ -z "$java_version" ]]; then
-    java_version=$(echo "$java_version_output" | grep -oE '[0-9]+' | head -1)
-  fi
-  if [[ "$java_version" == "1" ]]; then
-    java_version=$(echo "$java_version_output" | sed -n 's/.*"1\.\([0-9]*\)\..*/\1/p')
-  fi
-
-  if [[ -n "$java_version" ]] && (( java_version >= REQUIRED_JAVA_MAJOR )); then
-    echo "[OK] Java $java_version detected"
-    java_ok=true
-  else
-    echo "[WARN] Java detected but version $java_version is below $REQUIRED_JAVA_MAJOR"
-    errors=$((errors + 1))
-    missing_required+=("java")
-  fi
-else
-  echo "[MISSING] Java is not installed or not in PATH"
-  errors=$((errors + 1))
-  missing_required+=("java")
-fi
-
-# --- jadx ---
-if command -v jadx &>/dev/null; then
-  jadx_version=$(jadx --version 2>/dev/null || echo "unknown")
-  echo "[OK] jadx $jadx_version detected"
-else
-  echo "[MISSING] jadx is not installed or not in PATH"
-  errors=$((errors + 1))
-  missing_required+=("jadx")
-fi
-
-# --- Fernflower / Vineflower ---
-ff_found=false
-if command -v vineflower &>/dev/null; then
-  echo "[OK] vineflower CLI detected"
-  ff_found=true
-elif command -v fernflower &>/dev/null; then
-  echo "[OK] fernflower CLI detected"
-  ff_found=true
-else
-  for candidate in \
-    "${FERNFLOWER_JAR_PATH:-}" \
-    "$HOME/.local/share/vineflower/vineflower.jar" \
-    "$HOME/fernflower/build/libs/fernflower.jar" \
-    "$HOME/vineflower/build/libs/vineflower.jar" \
-    "$HOME/fernflower/fernflower.jar" \
-    "$HOME/vineflower/vineflower.jar"; do
-    if [[ -n "$candidate" ]] && [[ -f "$candidate" ]]; then
-      echo "[OK] Fernflower/Vineflower JAR found: $candidate"
-      ff_found=true
-      break
-    fi
-  done
-fi
-if [[ "$ff_found" == false ]]; then
-  echo "[MISSING] Fernflower/Vineflower not found (optional — better output on complex Java code)"
-  missing_optional+=("vineflower")
-fi
-
-# --- dex2jar ---
-if command -v d2j-dex2jar &>/dev/null || command -v d2j-dex2jar.sh &>/dev/null; then
-  echo "[OK] dex2jar detected"
-else
-  echo "[MISSING] dex2jar not found (optional — needed to use Fernflower on APK/DEX files)"
-  missing_optional+=("dex2jar")
-fi
-
-# --- Optional: apktool ---
-if command -v apktool &>/dev/null; then
-  echo "[OK] apktool detected (optional)"
-else
-  echo "[MISSING] apktool not found (optional — useful for resource decoding)"
-  missing_optional+=("apktool")
-fi
-
-# --- Optional: adb ---
-if command -v adb &>/dev/null; then
-  echo "[OK] adb detected (optional)"
-else
-  echo "[MISSING] adb not found (optional — useful for pulling APKs from devices)"
-  missing_optional+=("adb")
-fi
-
-# --- Machine-readable summary ---
-echo
-if [[ ${#missing_required[@]} -gt 0 ]]; then
-  for dep in "${missing_required[@]}"; do
-    echo "INSTALL_REQUIRED:$dep"
-  done
-fi
-if [[ ${#missing_optional[@]} -gt 0 ]]; then
-  for dep in "${missing_optional[@]}"; do
-    echo "INSTALL_OPTIONAL:$dep"
-  done
-fi
-
-echo
-if (( errors > 0 )); then
-  echo "*** ${#missing_required[@]} required dependency/ies missing. ***"
-  echo "Run install-dep.sh <name> to install, or see references/setup-guide.md."
-  exit 1
-else
-  if [[ ${#missing_optional[@]} -gt 0 ]]; then
-    echo "Required dependencies OK. ${#missing_optional[@]} optional dependency/ies missing."
-    echo "Run install-dep.sh <name> to install optional tools."
-  else
-    echo "All dependencies are installed. Ready to decompile."
-  fi
-  exit 0
-fi