android_application_analyzer - GitLite

KO | EN

gitlite — search

#python #hacktoberfest #react #ai #typescript #go #android #rust #macos #nodejs #windows #cli #awesome-list #openai

android_application_analyzer

(★ 175)

The tool is used to analyze the content of the android application in local storage.

파일 탐색기

최종 버전 다운로드 (.zip)

- - d2j-apk-sign.bat
  - d2j-apk-sign.sh
  - d2j-asm-verify.bat
  - d2j-asm-verify.sh
  - d2j-baksmali.bat
  - d2j-baksmali.sh
  - d2j-class-version-switch.bat
  - d2j-class-version-switch.sh
  - d2j-decrypt-string.bat
  - d2j-decrypt-string.sh
  - d2j-dex-recompute-checksum.bat
  - d2j-dex-recompute-checksum.sh
  - d2j-dex-weaver.bat
  - d2j-dex-weaver.sh
  - d2j-dex2jar.bat
  - d2j-dex2jar.sh
  - d2j-dex2smali.bat
  - d2j-dex2smali.sh
  - d2j-jar-access.bat
  - d2j-jar-access.sh
  - d2j-jar-weaver.bat
  - d2j-jar-weaver.sh
  - d2j-jar2dex.bat
  - d2j-jar2dex.sh
  - d2j-jar2jasmin.bat
  - d2j-jar2jasmin.sh
  - d2j-jasmin2jar.bat
  - d2j-jasmin2jar.sh
  - d2j-smali.bat
  - d2j-smali.sh
  - d2j-std-apk.bat
  - d2j-std-apk.sh
  - d2j_invoke.bat
  - d2j_invoke.sh
  - LICENSE.txt
  - NOTICE.txt
- - universal-root-detection-and-ssl-pinning-bypass.js
  - UniversalSSLUnpinning.js
- apktool_2.9.2.jar
- burpcert.crt
- frida-server-16.1.11-android-x86
- jd-gui-1.6.6.jar
- uber-apk-signer-1.3.0.jar
- 1.png
- 10.png
- 2.png
- 3.png
- 4.png
- 5.png
- 6.png
- 7.png
- 8.png
- 9.png
- icon.png
.gitignore
banner.py
GlobalVariables.py
gui.py
LICENSE
logcat.py
main.py
README.md
requirements.txt
setup.bat
setup.sh

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/NotSoSecure/android_application_analyzer

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd android_application_analyzer

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Python

쉬움 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Python 3 설치 시 'Add Python to PATH' 옵션을 꼭 체크하세요 (Windows).

pip install -r requirements.txt

requirements.txt 등에 명시된 파이썬 라이브러리를 설치합니다.

python main.py

파이썬 스크립트(또는 모듈)를 실행합니다.

✅ 에러 메시지 없이 실행되고 터미널에 안내 문구가 출력되면 정상입니다.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Android Application Analyzer

The tool is used to analyze the content of the android application in local storage.
 <br /> <br />
Install the dependency using following command 
- `chmod +x setup.sh`
- `./setup.sh`

Use the following command to run the tool using python3
- `python -m venv android_application_analyzer` 
- `android_application_analyzer\Scripts\activate` 
- `pip install -r requirements.txt` 
- `python main.py`

# Note
In order to run "Fridump" and "Frida universal ssl unpinning"
 script, Frida client must be installed on base machine <br /> <br />

It will list down all the devices connected to the device as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/1.png)
<br /> <br />
It will start fetching logcat logs for the selected device as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/2.png)
<br /> <br />
In order to analyze the application, select it from dropdown list as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/3.png)
<br /> <br />
To analyze the file content of the application, Select the file as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/4.png)
<br /> <br />
Analyze the sensitive information logcat logs as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/5.png)
<br /> <br />
In order to view application source in JD-GUI, click on "jdgui" button as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/6.png)
<br /> <br />
If the mobSF configured in the system and in order to open application with MobSF click on "mobSF" button as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/7.png)
<br /> <br />
In order to decompile application using apktool, click on "apktool" button as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/8.png)
<br /> <br />
In order to take application sandbox backup for future reference, click on "snapshot" button as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/9.png)
<br /> <br />
Frida universal SSL unpinning and fridump support as shown in Figure:
![Usage](https://raw.githubusercontent.com/NotSoSecure/android_application_analyzer/master/Usage/10.png)
<br /> <br />

# Future Enhancement

- [x] Strings command on “so or library” file
- [x] Compatible with python3
- [ ] Deep search :- Find all the files of the application from the entire storage
- [x] Snapshot button :- Copy entire application directory for future reference
- [x] The dropdown list of the application instead of Text Box 
- [x] Snapshot button :- Copy entire application directory for future reference
- [x] The dropdown list of the application instead of Text Box
- [x] One clikc application decompile using apktool
- [x] One click JD GUI application navigation
- [x] Universal Frida SSL Script to bypass ssl pinning
- [x] Run Fridump tool to check sensitive information in application memory
- [x] One click reinstall the APK using (uninstall app -> apktool rebuild app -> sign.jar (sign apk)-> install app)
- [x] One click mobSF analysis (prerequisite: mobSF installation required) 
      Note: as of now update the mobSF endpoint in GlobalVariables.py and "mobSFURL" variable

<br />
# References

- https://stackoverflow.com/questions/11524586/accessing-logcat-from-android-via-python
- https://payatu.com/wp-content/uploads/2016/01/diva-beta.tar.gz
- https://pythonspot.com/pyqt5/
- https://github.com/iBotPeaches/Apktool/releases
- https://github.com/java-decompiler/jd-gui/releases
- https://github.com/pxb1988/dex2jar/releases
- https://github.com/appium/sign/tree/master/dist
- https://github.com/frida/frida/releases/download/12.8.10/frida-server-12.8.10-android-x86.xz
- https://github.com/Nightbringer21/fridump
- https://codeshare.frida.re/@pcipolloni/universal-android-ssl-pinning-bypass-with-frida/