Reversing React Native Apps

React Native apps are JavaScript wearing a native shell. That is good news — the application logic ships as a bundle you can read — unless the bundle was compiled to Hermes bytecode, in which case you need a decompiler and the version compatibility problem becomes the whole task.

When to Use

• jadx shows ReactActivity, ReactNativeHost, and little application logic
• The APK contains assets/index.android.bundle or lib/*/libhermes.so
• The IPA contains main.jsbundle
• You need to find API endpoints, secrets, or business logic in an RN app
• You need to patch or hook JavaScript-level behaviour

When NOT to Use