
Rev Dex Dumper
- 1.3k installs
- 1.8k repo stars
- Updated May 6, 2026
- p4nda0s/reverse-skills
rev-dex-dumper is an agent skill that dumps decrypted DEX files from a running Android app using the bundled panda-dex-dumper binary and ADB for developers analyzing packed or obfuscated APKs.
About
rev-dex-dumper in p4nda0s/reverse-skills dumps DEX files from a running Android application's memory to support unpacking and deobfuscation workflows. The skill bundles the panda-dex-dumper binary relative to SKILL.md and documents pushing it to a device with adb push, setting execute permissions, and running the dumper against a live process to extract decrypted DEX that never appears on disk in the APK. Developers reach for rev-dex-dumper when static APK analysis fails because classes load from encrypted or packed dex at runtime. The workflow targets defeat of class-loading packers common in protected Android binaries during authorized security research or malware analysis. Agents activate on requests to unpack an APK, dump DEX from memory, or extract decrypted dex files from a running app. Output is recovered DEX artifacts ready for jadx or similar decompilers.
- Dumps DEX files directly from Android app memory using panda-dex-dumper via ADB
- Automates push, execution, pull, and cleanup of the dumper binary
- Automatically detects foreground app package when none is provided
- Extracts decrypted DEX even from class-loading packed applications
- Complete 5-step workflow with device cleanup to avoid leaving artifacts
Rev Dex Dumper by the numbers
- 1,307 all-time installs (skills.sh)
- +68 installs in the week ending Aug 5, 2026 (Skillselion tracking)
- Ranked #188 of 1,039 Mobile Development skills by installs in the Skillselion catalog
- Security screen: MEDIUM risk (skills.sh audit)
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/p4nda0s/reverse-skills --skill rev-dex-dumperAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 1.3k |
|---|---|
| repo stars | ★ 1.8k |
| Security audit | 1 / 3 scanners passed |
| Last updated | May 6, 2026 |
| Repository | p4nda0s/reverse-skills ↗ |
How do you dump DEX from a running Android app?
Extract decrypted DEX files from a running Android app for reverse engineering or unpacking obfuscated APKs.
Who is it for?
Security researchers and reverse engineers analyzing packed Android APKs where static DEX extraction fails.
Skip if: iOS binary analysis, benign app development, or APK modification without authorized security research context.
When should I use this skill?
User wants to unpack an Android APK, dump DEX from memory, extract decrypted DEX, or defeat class-loading packers on a device.
What you get
Decrypted DEX files extracted from device memory via panda-dex-dumper for decompilation and static analysis.
- Extracted DEX files
- panda-dex-dumper deployment on device
By the numbers
- Bundles panda-dex-dumper binary in the skill directory
Files
rev-dex-dumper - Android DEX Dumper
Dump DEX files from a running Android application's memory using panda-dex-dumper via ADB.
---
Tool Location
The panda-dex-dumper binary is bundled in this skill's directory. Resolve its absolute path relative to this SKILL.md file:
skills/rev-dex-dumper/panda-dex-dumper---
Workflow
1. Push the tool to device
adb push <path-to>/panda-dex-dumper /data/local/tmp/
adb shell chmod +x /data/local/tmp/panda-dex-dumper2. Determine target package name
If the user provides a package name, use it directly. Otherwise, get the foreground app:
adb shell dumpsys activity top | grep 'ACTIVITY' | tail -1 | awk '{print $2}' | cut -d/ -f13. Run the dumper
adb shell "cd /data/local/tmp && ./panda-dex-dumper -p $(adb shell pidof <package_name>)"The dumped DEX files are saved to /data/local/tmp/panda/ on the device.
4. Pull DEX files to host
adb pull /data/local/tmp/panda/ ./Pull to the user's current working directory.
5. Clean up device cache
adb shell rm -rf /data/local/tmp/panda/
adb shell rm /data/local/tmp/panda-dex-dumper---
Guidelines
1. Always verify ADB connection first — run adb devices and confirm a device is listed before proceeding. 2. Root may be required — panda-dex-dumper uses ptrace to attach to the target process. If the device is not rooted, the dump will fail. Suggest adb root or running via su if needed. 3. Wait for app to fully load — if the user is dumping a packed app, the real DEX is only available after the packer's class loader has decrypted it. Advise the user to navigate past the splash screen before dumping. 4. Handle pidof failure — if pidof returns empty, the app may not be running. Launch it first with adb shell monkey -p <package_name> -c android.intent.category.LAUNCHER 1. 5. Multiple DEX files are normal — packed apps often produce several DEX files. All files in /data/local/tmp/panda/ should be pulled. 6. Always clean up — remove both the dumped DEX files and the tool binary from the device after pulling results to avoid leaving artifacts.
Related skills
How it compares
Pick rev-dex-dumper for runtime memory DEX extraction; pick static APK unzip skills when classes are readable without packers.
FAQ
What tool does rev-dex-dumper use?
rev-dex-dumper uses the bundled panda-dex-dumper binary pushed to an Android device via ADB to extract decrypted DEX from a running application's memory.
When is rev-dex-dumper needed?
rev-dex-dumper fits packed or obfuscated APKs where static extraction misses runtime-loaded DEX, requiring memory dumps from a live process before decompilation.
Is Rev Dex Dumper safe to install?
skills.sh reports 1 of 3 security scanners passed. Review the Security Audits panel on this page before installing in production.