Claude Code is scary good at APK reverse engineering
A couple of weekends ago, Cat and I had a Bluetti home battery installed. Bluetti seems to be taking the open source community fairly seriously, and there was already a Home Assistant integration available on github, which is impressive. Before installation it was hard to tell if my EP760 inverter with "PBOX" IoT dongly thing was well supported or not, so we just kind of YOLO'ed it. Sadly, the existing open source Bluetti projects I looked at had pretty poor support for this model. However, I've spent a fair bit of time in the last year reading and watching tutorials on YouTube about Android reverse engineering, so I knew at least that JADX existed and how to run it to extract source code. I've also been playing around a lot with Claude Code, and it had done a fairly good job at analyzing malicious APKs from the courses I'd done, so I thought perhaps I could do something interesting here. Its super common for APKs to be obfuscated with commercial tools, but notably Claude is also pretty good at unwinding that obfuscation in a way in which its probably no longer a particularly effective technique for stopping analysis of otherwise…