Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Windows Tipps & SecurityDarum bekommen Sie mit der DEAN bald eine zweite Kontonummer(24.09.2026 um 08:20 Uhr)
Sichere ProgrammierungTimescaleDB Course – PostgreSQL for Time-Series Data(24.09.2026 um 04:04 Uhr)
Sichere ProgrammierungAI agents can't tell who's giving the orders. So I built a tiny gate.(24.09.2026 um 08:22 Uhr)
Sichere ProgrammierungCan a Developer Ship a Frontend With No DNS or Centralized Backend?(24.09.2026 um 08:26 Uhr)
Sichere ProgrammierungD33:它猜錯方向,卻把價位框對了(24.09.2026 um 08:33 Uhr)
Sichere ProgrammierungMigrating Off Opsgenie Before Sunset: A Regen Walkthrough(24.09.2026 um 08:33 Uhr)
Windows Tipps & SecurityDarum bekommen Sie mit der DEAN bald eine zweite Kontonummer(24.09.2026 um 08:20 Uhr)
Sichere ProgrammierungTimescaleDB Course – PostgreSQL for Time-Series Data(24.09.2026 um 04:04 Uhr)
Sichere ProgrammierungAI agents can't tell who's giving the orders. So I built a tiny gate.(24.09.2026 um 08:22 Uhr)
Sichere ProgrammierungCan a Developer Ship a Frontend With No DNS or Centralized Backend?(24.09.2026 um 08:26 Uhr)
Sichere ProgrammierungD33:它猜錯方向,卻把價位框對了(24.09.2026 um 08:33 Uhr)
Sichere ProgrammierungMigrating Off Opsgenie Before Sunset: A Regen Walkthrough(24.09.2026 um 08:33 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

I built a tool that clones a phone app from screenshots into React Native

I built a tool that clones a phone app from screenshots into React Native A few weeks ago I wanted to clone an app. Not a website, an actual phone app. And I realized pretty fast that it is a completely different problem, and nobody…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




I built a tool that clones a phone app from screenshots into React Native






A few weeks ago I wanted to clone an app. Not a website, an actual phone app. And I realized pretty fast that it is a completely different problem, and nobody had a good answer for it.



Here is the thing. Cloning a website is basically a solved party trick now. You open the dev tools and the whole DOM is right there, the CSS, the fonts, the asset URLs. A model reads all of that and spits out a copy. There are tools that do it really well.



A phone app gives you none of that. No markup to read, no stylesheet to copy. You get pixels. That is it. So every website-cloner trick is useless the second you point it at an iOS or Android app.



So I asked myself what I can always get from any app. The answer is kind of dumb but it is the whole idea: screenshots. You can always screenshot an app. No jailbreak, no decompiling, no SDK. A screenshot of an iPhone app and a screenshot of an Android app are the same thing to me, an image.



So screenshots became the input.






The problem with screenshots



An image has no numbers in it. You cannot read "16px padding" off a PNG, you are guessing. And if you let a model guess once, you get that thing everyone has seen: it looks kind of right, the vibe is there, but the spacing is off and the colors are slightly wrong and it feels like a knockoff.



So the core of the tool is not the "generate a screen" step. It is a loop. It builds a screen, renders it, screenshots its own output, puts that next to your original, and fixes whatever is different. Then it does it again, and keeps going until the two actually match. That loop is doing the measuring the DOM would have handed me for free on the web.



That is the part people keep calling the clever bit, and honestly it is the part that stops the output from looking like AI slop.





Someone asked me on launch day how it handles navigation, since a static screenshot does not tell you how you got from one screen to the next. Fair question, it is the hard part.



It is not screenshot order, that is too unreliable. It reads the navigation chrome instead. A persistent bottom bar across the shots means tabs. A back chevron in a header means a stack push. And it matches labels, so a row that says "Settings" gets wired to the screen whose header says "Settings." All of that goes into an app-spec.json (a nav graph, plus the tokens and screens) before a single screen is built, and the Expo Router setup is generated from that graph.



Conditional flows are still the weak spot and I am upfront about it. A screen you only reach in some state needs a hint or it gets approximated.






The part I actually cared about



Most of these tools stop at a dead shell. It renders, none of the buttons do anything. I hate that.



So the tool splits every action into two buckets: does this need a server, or does it run on the device? Anything that needs a backend gets mocked with a clear TODO. Anything on-device gets built for real. In the Todoist clone you add a task and it saves. In the Spendee clone you log an expense and the balance changes. Close the app, open it again, your data is still there. A real app, not a picture of one.






Proving it works



Screenshots lie. A button that does nothing looks identical to a working one in a still image. So I do not trust a screenshot to tell me the clone works.



Every clone ships with a script that drives the app in a headless browser, loads every screen, runs each feature, and fails if anything throws or a feature is broken. If the "add a task, reload, it is still there" flow breaks, the build fails. No "looks fine in a screenshot" bugs.






What it cannot do



I would rather say this than have you find out:




  • No backend. Data is mocked or on-device.

  • Brand icons are approximated, not copied.

  • It only clones the screens you actually capture.






How to use it



It is open source, MIT. It ships as a Claude Code skill (that is the reference setup) but it also works in Cursor, Codex, Windsurf, Gemini and a bunch more, all generated from one source of truth.



Next on the roadmap is screenshots to native SwiftUI and Compose, then decompiling an APK for the cases where you need exact values.



Repo: https://github.com/Birkenpapier/ai-app-cloner



If you try it, I actually want to know where it falls over. Clone something weird and tell me what broke.

SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - I built a tool that clones a phone app from screenshots into React Native
id: e289ae34-ad0a-45d8-806e-cfdc02b782f6
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "I built a tool that clones a p" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I built a tool that clones a phone app f.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I built a tool that clones a phone app from screenshots into React Native

Thematisch verwandte Begriffe: built, tool, that, clones · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96772 | A security flaw has been discovered in Intelliants Subrion CMS up to 4.2…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick