Android Security
Contents
Tools
Static Analysis Tools
detect and warn the user about potential malicious behaviors developed by an Android application.
Smali Static Code Analysis
Scans and compares the CFG against the CFG of malicious applications
extracts actionable data like C&C, phone number etc.
Performs a combination of symbolic + concrete execution of the app
A tool for calculating the risk of Android apps based on their permissions, with an online demo available.
Secure, Unified, Powerful, and Extensible Rust Android Analyzer
A Standalone binary inspection tool that can browse any Android executable and show important info.
Cross-platform tool that aids developers, bug-bounty hunters, and ethical hackers in performing static code analysis on mobile applications. This tool was created with a big focus on usability and graphical guidance in the user interface.
Joint intraprocedural and interprocedural program analysis tool to find vulnerabilities in Android apps, built on Soot and Scala
An Obfuscation-Neglect Android Malware Scoring System
Android APK Decompilation for the Lazy
Scanning APK file for URIs, endpoints & secrets.
Web application for performing Static Analysis and detecting malware in Android APKs.
Static code analysis for Kotlin
Advanced analysis software for APK payloads created by RATs.
App Vulnerability Scanners
Dynamic Analysis Tools
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
House: A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Mobile Security Framework is an intelligent, all-in-one open-source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis, and web API testing.
Android Package Inspector - dynamic analysis with API hooks, start unexported activities, and more. (Xposed Module)
Dynamic Java code instrumentation (requires the Substrate Framework)
Dynamic Java code instrumentation
Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
Android extension for Cuckoo sandbox
Memory analysis of Android (root required)
Android port of auditd, not under active development anymore
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitoring.
a system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis results with this information.
incomplete
Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
Mobile Application Reverse Engineering and Analysis Framework
a tool for extracting static and dynamic features from Android APKs. It combines different well-known Android app analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard, and VirusTotal analysis.
is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
PAPIMonitor (Python API Monitor for Android apps) is a Python tool based on Frida for monitoring user-select APIs during the app execution.
The tool is used to analyze the content of the Android application in local storage.
Intercept SSL/TLS connections with Frida; Allows TLS key extraction and decryption of TLS payload as PCAP on Android in real-time.
A tool designed to automate various Mobile Application Penetration Testing (MAPT) tasks and facilitate interaction with Android devices.
tools for exploiting device via ADB
Burp Suite extension that, working as a bridge between Burp and Frida, lets you use and manipulate the applications' own methods while tampering with the traffic exchanged between the applications and their back-end services/servers.
MPT (Mobile Pentest Toolkit) is a must-have solution for your Android penetration testing workflows. This tool allows you to automate security tasks.
software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Reverse Engineering
apk decompilation
powerful, integrates well with other tools
make any application on the device debuggable (using Cydia Substrate).
dex to jar converter
dex to jar converter from Google
Java decompiler
Java decompiler
Java decompiler
apk manipulation
GUI for reverse engineering
Another basic command-line reverse engineering tool
A CLI application that prepares Android APK files for HTTPS inspection
Simple Android application sandbox file browser tool
Obfuscapk is a modular Python tool for obfuscating Android apps without requiring their source code.
ARMAND (Anti-Repackaging through Multi-pattern, Anti-tampering based on Native Detection) is a novel anti-tampering protection scheme that embeds logic bombs and AT detection nodes directly in the apk file without needing their source code.
a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices
a tool to exemplify patching Dalvik bytecode in a DEX (Dalvik Executable) file and assist in the static analysis of Android applications.
Run arbitrary code by patching OAT files
An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit Framework to get a Meterpreter session.
plugin for VS code to analyze APKs
Fuzz Testing
App Repackaging Detectors
Market Crawlers
get app details and download apps from the official Google Play Store.
download apps from Aptoide third-party Android market
download apps from Appland third-party Android market
PlaystoreDownloader is a tool for downloading Android applications directly from the Google Play Store. After an initial (one-time) configuration, applications can be downloaded by specifying their package name.
Misc Tools
android-vts scans a device for set of vulnerabilities
AppMon is an automated framework for monitoring and tampering with system API calls of native macOS, iOS, and Android apps. It is based on Frida.
Bluetooth experimentation framework based on the Reverse Engineering of Broadcom Bluetooth Controllers
AMDH scans and hardens the device's settings and lists harmful installed Apps based on permissions.
Comprehensive mobile security framework supporting 18 manufacturers with baseband exploitation, cellular security, TEE/TrustZone research, and BootROM extraction tools.
Extract given archive to images
A flexible playground for Android CTF challenges
A collection of android Exploits and Hacks