Apktag May 2026

# Inotify on a "drop_folder" apktag tag --recursive ./incoming --db ~/my_index.db apktag search --db ~/my_index.db --tag "crypto_mining" --format csv You can also use it as a poor man's VirusTotal. Before manually reversing a new APK, run:

You can run:

The Android reverse engineering community has long solved the problem of decompiling code (thanks, apktool and jadx ). But until recently, no one seriously solved the problem of it. apktag

APKTag solves this with . It doesn't just store the signature hash; it computes the signature_block_hash (the hash of the entire signing block). Two APKs with different package names but the same signature block hash are 100% signed by the same developer key. # Inotify on a "drop_folder" apktag tag --recursive

Imagine a simple watcher script: