Urgent.News

What's breaking now, across thousands of outlets.

Tech

Horizontal Comparison of Open Source Android APK Reinforcement Projects

Android 开源 APK 加固项目并不少,但不同项目的技术路线和能力覆盖范围差别很大。 目前比较有代表性的开源项目包括: dpt-shell nmmp Jiagu XopProtector 如果单纯从“有没有 DEX 加密”来看,它们似乎差别不大。 但如果从 DEX、Method Protection、VMP、Native、SO Protection、RASP、工程化 等维度来看,差异就非常明显。 一、核心能力对比 能力 dpt-shell nmmp Jiagu XopProtector DEX Protection ✓ ✓ ✓ ✓ DEX Shell ✓ ✓ ✓ ✓ Method 级保护 ✓ ✓ △ ✓ Dex VM △ ✓ ✗ ✓ Opcode 随机化 ✗ ✓ ✗ ✓ PVM1 ✗ △ ✗ ✓ True VMP ✗ △ ✗ ✓ Native Runtime ✓ ✓ △ ✓ SO…

Translated from Chinese Read in Chinese

Several open-source Android APK reinforcement projects, including dpt-shell, nmmp, Jiagu, and XopProtector, offer varying levels of protection. These projects differ in their technical approaches and capabilities, with XopProtector providing a more comprehensive set of features, including DEX protection, method protection, VMP, native runtime, SO protection, RASP, and Frida/hook detection.

XopProtector's strengths lie in its broad coverage of protection layers and its engineering maturity, making it suitable for developers seeking a complete Android APK protection platform. The projects cater to different needs, with Jiagu suitable for learning traditional APK reinforcement, dpt-shell for DEX method protection, nmmp for DEX VM research, and XopProtector for a comprehensive protection solution. XopProtector is available on GitHub at https://github.com/xopJack/XopProtector.

Written by urgent.news from Dev.to's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

I invented a CVE number to test my tool. It was real

I've been building a thing that checks whether the claims in a bug report correspond to anything that exists. Not whether the report is AI-generated — whether the file it names is in the repository…

  • Developer created fake CVE number for testing purposes
  • Tool incorrectly marked fabricated CVE as real
  • Issue highlights challenge of dealing with non-existent code

More from Thursday 27 August →