Building GhostShell: A Modern Python & Flask Security Suite for APK Decompilation & Vulnerability…

Introduction

When working with mobile application security and threat analysis, relying strictly on traditional command line interfaces can sometimes slow down structured workflows. To bridge this gap, I developed GhostShell an advanced, lightweight cybersecurity and utility suite built with Python and Flask.

GhostShell provides a centralized, web based platform that wraps powerful analytical workflows into a clean, dark cyber hacker aesthetic interface, making security operations smoother and more organized.

The core architecture of GhostShell is designed around a seamless three-stage mobile security pipeline, alongside built-in analytical modules:

1. APK Decompilation

• Users can upload target Android APK files (up to 500MB) directly through the web interface.
• Automated backend handlers process the files, extracting source code (Smali/DEX), resources, and AndroidManifest files into a structured directory for deep inspection.

1.Source Inspection and Editing

• The platform organizes extracted files for easy navigation, allowing analysts to review business logic, hardcoded API endpoints, credentials, and configuration settings efficiently.
• Modifications can be made directly within the development environment before rebuilding.

2. APK Recompilation and Vulnerability Setup

• Modified source files and assets can be recompiled back into a functional APK package.
• The environment supports mobile-specific vulnerability scanning workflows to detect common security flaws, such as insecure data storage, weak cryptographic implementations, improper component exports, and hazardous interface bindings.

you can use in your linux .

GitHub Repository: https://github.com/ghostprotocolsha/ghostshell.git

The localhost use on chrome

FOR EDUCATIONAL PURPOSES ONLY