Building GhostShell: A Modern Python & Flask Security Suite for APK Decompilation & Vulnerability Scanning
Introduction
When working with mobile application security and threat analysis, relying strictly on traditional command line interfaces can sometimes slow down structured workflows. To bridge this gap, I developed GhostShell an advanced, lightweight cybersecurity and utility suite built with Python and Flask.
GhostShell provides a centralized, web based platform that wraps powerful analytical workflows into a clean, dark cyber hacker aesthetic interface, making security operations smoother and more organized.
Get Muhammed shifan kamalsha tk’s stories in your inbox
Join Medium for free to get updates from this writer.
The core architecture of GhostShell is designed around a seamless three-stage mobile security pipeline, alongside built-in analytical modules:
- APK Decompilation
- Users can upload target Android APK files (up to 500MB) directly through the web interface.
- Automated backend handlers process the files, extracting source code (Smali/DEX), resources, and AndroidManifest files into a structured directory for deep inspection.
1.Source Inspection and Editing
- The platform organizes extracted files for easy navigation, allowing analysts to review business logic, hardcoded API endpoints, credentials, and configuration settings efficiently.
- Modifications can be made directly within the development environment before rebuilding.
2. APK Recompilation and Vulnerability Setup
- Modified source files and assets can be recompiled back into a functional APK package.
- The environment supports mobile-specific vulnerability scanning workflows to detect common security flaws, such as insecure data storage, weak cryptographic implementations, improper component exports, and hazardous interface bindings.
you can use in your linux .
GitHub Repository: https://github.com/ghostprotocolsha/ghostshell.git
The localhost use on chrome
FOR EDUCATIONAL PURPOSES ONLY
