Update Androguard v1.5 : Reverse engineering, Malware and goodware analysis of Android applications.

Change V1.5 :
– Session (save/load)
– Annotation
– Documentation
– Support of ARM
– Support of dex writing
– Disassembler/Decompiler(DAD)

Androguard (Android Guard) is a tool written in python to play with :

  • .dex (Dalvik virtual machine)
  • APK (Android application)
  • Android’s binary xml
  • .class (Java virtual machine)
  • JAR (Java application)
  • To install androguard, please follow the link. Moreover, the roadmap and features are now available.

You can play directly with Androguard by using ARE Virtual Machine :

You can update the repository in tools/androguard with : hg pull && hg update because it’s not the latest version in the vm

Androguard has the following features:

  • Map and manipulate (disassemble/decompile/modify) DEX/ODEX/APK files into full Python objects,
  • Access to the static analysis of your code (basic blocks, instructions, permissions (with database from http://www.android-permissions.org/) …) and create your own static analysis tool,
  • Check if an android application is present in a database (malwares, goodwares ?),
  • Open source database of android malware (this opensource database is done on my free time, of course my free time is limited, so if you want to help, you are welcome !),
  • Diffing of android applications,
  • Measure the efficiency of obfuscators (proguard, …),
  • Determine if your application has been pirated (plagiarism/similarities/rip-off indicator),
  • Detection of ad/open source librairies (WIP),
  • Risk indicator of malicious application,
  • Reverse engineering of applications (goodwares, malwares),
  • Transform Android’s binary xml (like AndroidManifest.xml) into classic xml,
  • Visualize your application with gephi (gexf format), or with cytoscape (xgmml format), or PNG/DOT output,
  • Integration with external decompilers (JAD/DED/…)
  • Dump the jvm process to find classes into memory,

Download : androguard-1.5.tar.gz (2.0 MB)
Find Other Version |
Read more in here http://code.google.com/p/androguard/
Security List Network™ PRESENT