APKDeepLens

APKDeepLens Android security insights in full spectrum. Features • Detection • Installation • Usage • Reports Featured atBlack Hat MEA 2023 and Black Hat ASIA 2024 What is APKDeepLens? APKDeepLens is a Python-based static analysis tool for Android APK files. It decompiles APKs using JADX and runs...

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

mobileAudit

Mobile Audit MobileAudit - SAST and Malware Analysis for Android Mobile APKs A Django web application to perform static analysis and detect malicious content inside Android APKs. The project extracts app metadata, scans source code for weaknesses, and aggregates results SAST findings, best...

APKiD

APKiD APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting Detecting Pirated and Malicious Android...

NinjaDroid

NinjaDroid NinjaDroid is a simple tool to reverse engineering Android APK packages. Published at: https://snapcraft.io/ninjadroid root@kitploit: $ snap install ninjadroid --channel=beta Overview NinjaDroid uses AXMLParser together with a series of Python scripts based on aapt, keytool, string and...

deep-C

Deep-C Deep-C is an Android Deep Link Exploitation Framework that automatically decompiles APKs, identifies exposed and insecure deep link entry points, validates exploitability using static analysis and optional AI verification , and generates executable adb Proof-of-Concepts PoCs. Deep-C is...

SSLPinDetect

🔒 SSL Pinning Detector SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled smali code. It helps security researchers and penetration testers identify SSL pinning mechanisms used in mobile applications efficiently. 🚀...

quark-engine

Malware Family Analysis Report Showcase Quick Start Step 1. Install via PyPi Install the latest version of Quark Engine: root@kitploit: $ pip3 install -U quark-engine Step 2. Download Latest Rules Fetch the latest rule database: root@kitploit: $ freshquark Step 3. Run Summary Report Analyze an AP...

apk-mitm

apk-mitm A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers...

org.cowpoop.moooooo

org.cowpoop.moooooo APK de Android basada en información pública que utiliza el exploit DirtyCOW CVE-2016-5195 ESTA ES ACTUALMENTE UNA APLICACIÓN QUE NO FUNCIONA LA ELIMINARÉ UNA VEZ QUE LAS PRUEBAS TENGAN ÉXITO...

jadx-ai-mcp

JADX-AI-MCP Parte de Zin MCP Suite ⚡ Servidor MCP totalmente automatizado + plugin de JADX creado para comunicarse con LLMs a través de MCP para analizar APKs de Android usando LLMs como Claude: descubre vulnerabilidades, analiza APKs y realiza ingeniería inversa sin esfuerzo. ⭐ Contribuyentes...

droidcarve

DroidCarve DroidCarve es capaz de analizar un archivo APK de Android y automatizar ciertas tareas de ingeniería inversa. Este repositorio contiene el componente servidor y el componente cliente. El Frontend El frontend es una aplicación React, que puedes encontrar en la subcarpeta client/. El...

AndroPyTool

AndroPyTool Update! DroidBox images were fixed. Dynamic analysis is working now. This is a tool for extracting static and dynamic features from Android APKs. It combines different well-known Android apps analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard or VirusTotal analysis. Provid...

Obfu-DE-Scate

🤖 ObfuDEscate: A De-obfuscation and Comparison tool for Android APKs. 📱 ObfuDEscate is a Python tool designed to simplify the process of de-obfuscating and comparing two versions of an Android APK - even if the functions have been renamed as part of obfuscation. With fuzzy comparison logic,...

kwetza

Introducción Por Chris Le Roy @brompwnie [email protected] Kwetza es una herramienta que permite infectar una aplicación Android existente con un payload de Meterpreter. ¿Qué hace? Kwetza infecta una aplicación Android existente con plantillas de payload personalizadas o predeterminadas para...

backdoor-apk

backdoor-apk backdoor-apkは、任意のAndroid APKファイルにバックドアを追加するプロセスを簡略化するシェルスクリプトです。このシェルスクリプトの利用者は、Linux、Bash、Metasploit、Apktool、Android SDK、smaliなどに関する実用的な知識を持っている必要があります。本スクリプトは無保証で現状のまま提供され、教育目的のみを意図しています。 使い方: root@kitploit: root@kali:/Code/github/backdoor-apk/backdoor-apk ./backdoor-apk.sh...

ReverseAPK

ReverseAPK Credits: @xer0dayz Website: https://sn1persecurity.com Version: 1.2 ABOUT: Quickly analyze and reverse engineer Android applications. FEATURES: Displays all extracted files for easy reference Automatically decompile APK files to Java and Smali format Analyze AndroidManifest.xml for...

slicer

Slicer APKファイルに対する偵察プロセスを自動化するツールです。 Slicerは、抽出されたAPKファイルへのパスを受け取り、エクスポートされており、権限がnullで外部から呼び出し可能なすべてのアクティビティ、レシーバー、サービスを返します。 注意 : APKはjadxまたはapktoolで抽出されている必要があります。 目次 Slicer 目次 概要 機能 インストール 使い方 使用例 謝辞とクレジット 貢献 サポート 概要 なぜ？...

CVE-2024-50657

CVE-2024-50657: Control de Acceso Incorrecto en la apk de Owncloud Un problema en la apk de Owncloud para Android v.4.4.1 permite a un atacante físicamente cercano escalar privilegios a través de la clase PassCodeViewModel, específicamente en el método checkPassCodeIsValid. Tipo de Vulnerabilidad...

CVE-2024-54916

CVE-2024-54916: Authentication Bypass on Telegram apk An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method. Vulnerability Type...