English | 简体中文
ReArk is a desktop reverse engineering and AI-assisted analysis tool for HarmonyOS and Android applications. Open HarmonyOS .hap, .app, and .abc files or Android .apk and .aab packages to inspect code, resources, metadata, and application behavior in one workspace.
Combine static analysis with connected-device inspection and ReArk Agent to investigate application logic, review security, and work through CTF challenges.
Download the installer for your computer from Latest release. See All releases for version history and release notes.
| OS | Requirements | Direct links |
|---|---|---|
 Windows |
Windows 10+ x64 |
 |
 macOS |
macOS 14.0+ Apple Silicon |
 |
 Linux |
x64 Build from source; system requirements pending validation |
No installer available |
Package and static analysis
- Analyze HarmonyOS HAP/APP/ABC and Android APK/AAB files
- Browse package structure, modules, source output, resources, and application metadata
- Disassemble and decompile ABC bytecode; explore strings, literals, cross-references, and call argument flows
- Inspect Android manifests, permissions, components, entry points, resources, and application icons
- Read Android disassembly and Java-like decompiled output
- View hex data, formatted JSON, XML, text, images, and media resources; search files and navigate source output
HarmonyOS signing and packaging
- Inspect signatures, certificates, and signing validity
- Configure signing materials, re-sign, and repackage HarmonyOS applications
- Install supported application packages on connected devices; Android device installation uses APK files
ReArk Agent
- Ask contextual questions about the current HarmonyOS or Android package
- Discover analysis capabilities and retrieve package files, metadata, strings, disassembly, and decompiled output as needed
- Attach reference documents to supplement package evidence with your own materials
- Use supported model providers, including OpenAI-compatible endpoints and local Ollama models
- Combine static analysis with device workflows; host commands, Python execution, and device operations use the applicable approval flows
Connected devices
- Discover HarmonyOS devices through HDC and Android devices through ADB
- Install and launch applications, capture screenshots, inspect UI nodes, and read device logs
- Mirror device screens in real time and control devices using mouse and keyboard
- Use screen recording, audio, clipboard, and device controls where supported by the device and runtime
- Work with fullscreen or detached mirroring windows
Available analysis views and device actions depend on the package format, operating system version, and device capabilities. ABC evidence tools and HarmonyOS re-signing are specific to HarmonyOS packages.
| Workspace overview | Ark disassembly |
|---|---|
 |
 |
| ABC / Hex inspection | Strings |
|---|---|
 |
 |
| ReArk Agent | Agent analysis |
|---|---|
 |
 |
| Device runtime | ABC trace view |
|---|---|
 |
 |
Use ReArk only for legally authorized reverse engineering, interoperability research, malware analysis, and security research.
When using ReArk Agent with remote model providers, avoid submitting secrets, certificates, user data, trade secrets, or other sensitive content.
ReArk is licensed under the Apache License 2.0. See LICENSE for details.
Third-party notices are listed in THIRD_PARTY_NOTICES.md.
- Issues: GitHub Issues
- User guide: cppmore.com/ReArk