Apktool workflow — decode and rebuild resources

Last updated: · By the BinBench editorial team · Stars and releases checked via the GitHub API
For legal, authorized and educational use only. Only analyze software you own or have written permission to examine.
Quick answer

Apktool (apktool.org, Apache-2.0) decodes Android APK resources and Smali, and can rebuild them. Latest version referenced in BinBench facts is v3.0.3. Use it on APKs you own or have written permission to modify (your app, an internal build, an in-scope assessment).

On this page

Typical authorized workflow

  1. Decode the APK into a project directory (resources + Smali).
  2. Inspect AndroidManifest.xml, resources and Smali for interoperability or bug-fix work you are allowed to do.
  3. Rebuild the project into an unsigned APK.
  4. Sign with your signing key using Android's official apksigner / jarsigner flow.
  5. Install only on devices/emulators you control.

Exact CLI flags change across major versions — prefer the official documentation over random mirror blogs.

How it pairs with jadx

JobTool
Read Java-like sourcejadx
Edit resources / Smali and rebuildApktool
Runtime hooks on a lab buildFrida (authorized only)
  • Decoding a third-party APK "for fun" without rights can still be unlawful depending on jurisdiction and terms.
  • Do not use this workflow to strip license checks, DRM or integrity protections.
  • BinBench does not host APKs, keystores or cracked toolchains.
Which to pick
  • jadx to understand code; Apktool to work with resources/Smali on authorized packages.
  • Keep signing keys and release tracks under your organization's policy.

For legal, authorized and educational use only.

FAQ

Is Apktool a Java decompiler?

No. Apktool decodes resources and disassembles to Smali. For Java-like source, use jadx (see jadx vs Apktool).

Can I redistribute a rebuilt APK?

Only if you have the rights. Rebuilding does not grant a license to someone else's app.

Which version should I cite?

BinBench's verified table lists Apktool v3.0.3 (2026-07-20 UTC area). Confirm the latest on GitHub Releases before publishing runbooks.

Do I need a JDK?

Yes. Apktool is a Java project; install a full JDK as upstream documents for your platform.

Will BinBench help bypass Play integrity / DRM?

No.

Sources