JD Duo FAQs

Question 1

How many decompiler engines does JD Duo integrate?

Accepted Answer

JD Duo leverages 7 distinct Java decompiler engines, including JD-Core (v0 & v1), Vineflower, CFR, Procyon, Fernflower, and JADX. It also features an intelligent auto-fallback strategy that attempts multiple engines to provide the best possible decompilation results.

Question 2

What is JD Duo and what is its main purpose?

Accepted Answer

JD Duo (jd-mcp-duo) is a comprehensive multi-decompiler toolkit and an MCP (Model Context Protocol) server for Java. Its primary purpose is to enable deep analysis of Java bytecode and source code, offering extensive CLI tools and programmatic access for AI agents, particularly for security analysis scenarios.

Question 3

What security analysis scenarios does JD Duo support?

Accepted Answer

JD Duo is invaluable for security engineers, supporting critical tasks such as closed-source auditing, taint tracking, hardcoded secret discovery, dependency risk identification, and stack trace resolution. It provides core capabilities for code auditing and vulnerability discovery in various Java archives.

Question 4

Which file and archive formats can JD Duo analyze?

Accepted Answer

JD Duo supports a broad range of Java-related archive and file formats for analysis, including JAR, WAR, DEX, APK, and direct directories of class files. This versatility makes it suitable for analyzing applications across different Java environments, including Android.

Question 5

How does JD Duo integrate with other tools or AI agents?

Accepted Answer

JD Duo operates in dual mode: as an MCP (JSON-RPC 2.0) server, it provides a standardized protocol for seamless integration with AI agents and other automated clients. Additionally, it functions as a comprehensive CLI toolkit, allowing for direct terminal use and easy integration into scripts and CI/CD pipelines.

JD Duo

JD Duo

Key Features

Use Cases

Key Features

Use Cases