A Comparison of Open-Source Android APK Protection Projects
There are many open-source Android APK protection projects, but their technical approaches and protection coverage are quite different.
Four representative projects are:
- dpt-shell
- nmmp
- Jiagu
- XopProtector
If we only compare DEX encryption, the differences may not look significant.
However, once we compare DEX Protection, Method Protection, VMP, Native Protection, SO Protection, RASP, and engineering capabilities, the differences become much clearer.
1. Core Capability Comparison
| Capability | dpt-shell | nmmp | Jiagu | XopProtector |
|---|---|---|---|---|
| DEX Protection | ✓ | ✓ | ✓ | ✓ |
| DEX Shell | ✓ | ✓ | ✓ | ✓ |
| Method-Level Protection | ✓ | ✓ | △ | ✓ |
| Dex VM | △ | ✓ | ✗ | ✓ |
| Opcode Randomization | ✗ | ✓ | ✗ | ✓ |
| PVM1 | ✗ | △ | ✗ | ✓ |
| True VMP | ✗ | △ | ✗ | ✓ |
| Native Runtime | ✓ | ✓ | △ | ✓ |
| SO Protection | ✗ | ✗ | ✗ | ✓ |
| Frida / Hook Detection | △ | ✗ | ✗ | ✓ |
| RASP | △ | ✗ | ✗ | ✓ |
| Packer | ✓ | ✓ | ✓ | ✓ |
| Desktop Tool | ✗ | △ | △ | ✓ |
| Java API / Integration | △ | △ | △ | ✓ |
The table describes the publicly documented capability scope of these projects. It should not be interpreted as meaning that each capability has identical maturity, compatibility, or real-world effectiveness.
2. dpt-shell: A Strong Dex Method Protection Project
dpt-shell is one of the most representative open-source Android protection projects.
Its main focus is:
Dex Method Protection + Runtime Reconstruction
Its architecture can be roughly summarized as:
DEX
↓
Method Protection
↓
Runtime Reconstruction
It is particularly valuable for studying:
- Dex Method Protection
- Runtime Reconstruction
- Native Shell
- Anti-Debugging
Compared with XopProtector, however, its overall protection scope is more focused.
XopProtector extends the protection stack into:
VMP + SO Protection + RASP + Frida/Hook Detection + Desktop/Packer
3. nmmp: A Representative Dex VM Project
nmmp is another highly interesting project.
Its main technical direction is:
Dex VM + Dalvik Bytecode Interpretation
The project converts DEX-related data into C structures and executes Dalvik bytecode through a Native VM. It also supports opcode randomization.
Its core architecture can be summarized as:
DEX
↓
Dex VM
↓
Native
↓
Opcode Randomization
This makes nmmp particularly valuable for studying:
Dex Virtualization and Native Interpretation.
XopProtector extends this concept into a broader protection stack:
DEX
↓
Method
↓
PVM1
↓
True VMP / PVM2
↓
Native
↓
SO Protection
↓
RASP
So the main difference is:
nmmp focuses more on Dex VM / virtualization technology, while XopProtector aims at a broader APK Protection architecture.
The nmmp repository also has open issues involving newer Android compatibility, 16 KB alignment, native library loading, and AAR-related scenarios, which highlights some of the engineering challenges involved in maintaining a VM-based protection system.
4. Jiagu: A Good Starting Point for Traditional APK Protection
Jiagu-style projects mainly focus on:
DEX Encryption + Shell + Runtime Loading
This approach remains very useful for understanding the fundamentals of Android APK protection.
However, compared with more modern multi-layer protection architectures, the protection scope is relatively traditional.
It generally does not provide the same level of coverage in areas such as:
True VMP
SO Protection
RASP
Frida Detection
Hook Detection
Therefore:
Jiagu is particularly useful for learning traditional APK protection techniques.
XopProtector targets a much broader protection model.
5. XopProtector: Broader Protection Coverage
The biggest advantage of XopProtector is not a single protection mechanism.
It is the combination of multiple protection layers into one APK Protection Pipeline.
Its publicly documented capabilities include:
DEX Protection
↓
Method Protection
↓
PVM1
↓
True VMP / PVM2
↓
Native Runtime
↓
SO Protection
↓
RASP
↓
Frida / Hook Detection
It also provides:
Packer
+
CLI
+
Windows Desktop
+
Java API
This makes it more than a traditional DEX protection project.
It is moving toward:
An Android Application Protection Platform.
6. Which Project Should You Choose?
Jiagu
Best for:
Learning traditional APK protection
Core focus:
DEX Shell / DEX Encryption
dpt-shell
Best for:
Studying Dex Method Protection
Core focus:
Method Protection / Runtime Reconstruction
nmmp
Best for:
Studying Dex VM and Native Interpretation
Core focus:
Dex VM
XopProtector
Best for:
Studying a broader Android APK Protection architecture
Core focus:
DEX + Method + VMP + Native + SO + RASP
7. If We Compare Overall Protection Coverage
A simple way to understand the four projects is:
Jiagu
↓
DEX Protection
dpt-shell
↓
DEX + Method Protection
nmmp
↓
DEX + Dex VM + Native VM
XopProtector
↓
DEX
+
Method
+
PVM
+
True VMP
+
Native
+
SO
+
RASP
+
Anti-Hook
This is where XopProtector stands out.
Its main advantage is not that it replaces every individual project in every technical area.
Rather:
It provides a broader combination of protection capabilities within one framework.
8. Why I Recommend XopProtector
If you simply want to learn APK protection:
Jiagu is worth studying.
If you want to research Method Protection:
dpt-shell is worth studying.
If you want to research Dex VM technology:
nmmp is worth studying.
But if you are looking for an open-source Android APK protection project covering:
DEX + Method + VMP + Native + SO + Runtime Security
then I would strongly recommend taking a closer look at:
XopProtector
Its strength is the combination of:
Broader protection coverage + engineering integration + extensibility.
For developers who want to research Android protection or build their own APK Protection Platform, this makes XopProtector particularly interesting.
9. Final Summary
The four projects can be summarized as:
| Project | Main Focus |
|---|---|
| Jiagu | Traditional DEX Shell / DEX Protection |
| dpt-shell | Dex Method Protection |
| nmmp | Dex VM / Native VM |
| XopProtector | Multi-Layer Android APK Protection Platform |
So, if you are looking for an open-source, extensible Android APK protection project with broader protection coverage, XopProtector is definitely worth paying attention to.
Rather than focusing only on traditional DEX Shell techniques, it attempts to combine:
DEX + Method + VMP + Native + SO + RASP
into a unified Android APK Protection framework.
That broader protection architecture is, in my view, the most interesting aspect of XopProtector.
GitHub:
Top comments (0)