APKSEC

Tool which gathers basic info from apk, which can be used for Android penetration testing.

REQUIREMENTS AND INSTALLATION

Build APKSEC:

git clone https://github.com/jayateertha043/apksec.git
cd apksec
go build apksec.go

Install using go install:

go install github.com/jayateertha043/apksec@latest

Run apksec:

apksec -h

Usage

apksec -apk "path to apk"

Incase you want to grab results from virustotal:

apksec -apk "path to apk" -vt "virustotal_api_key"

Demo

Features

Extract general package information from apk
Find android permissions used by apk
Find apk certificate, signature, hashes
Find informations from meta-data
Find exported activities without permission
Find exported content provider without permission
Find exported broadcast receiver without permission
Find exported services without permission
Use VirusTotal to obtain summary of apk and detect malicious apk

Todo

Extract informations from deep links
Extract common api keys/secrets from strings

Credits

Inspired from andpalmier/apkingo

Notable 3rd party libraries used:

Author

👤 Jayateertha G

Twitter: @jayateerthaG
Github: @jayateertha043

Создание библиотеки Go для Android

gomobile-simple-example Пример создания библиотеки для android Структура проекта: gomobile-simple-example/ --app/ ------libs/ --libmobile/ ----src/ --

0 Dec 4, 2021

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

sigstore-scaffolding This repository contains scaffolding to make standing up a full sigstore stack easier and automatable. Our focus is on running on

40 Dec 27, 2022

Igo Agent is the agent of Igo, a command-line tool, through which you can quickly start Igo

igo agent 英文 | 中文 Igo Agent is the agent of Igo, a command-line tool, through which you can quickly start Igo, and other capabilities may be added lat

1 Dec 22, 2021

Rename-pvc can rename PersistentVolumeClaims (PVCs) inside KubernetesRename-pvc can rename PersistentVolumeClaims (PVCs) inside Kubernetes

rename-pvc rename-pvc can rename PersistentVolumeClaims (PVCs) inside Kubernetes. ⚠️ Be sure to create a backup of your data in the PVC before using r

17 Oct 31, 2022

Output all versions of a local git repo, which could be used as test data for your ML program.

gitwalker Output all versions of a local git repo, which could be used as test data for your ML program. Notice This program is under development. Cur

0 Dec 27, 2021

An Alert notification service is an application which can receive alerts from certain alerting systems like System_X and System_Y and send these alerts to developers in the form of SMS and emails.

Alert-System An Alert notification service is an application which can receive alerts from certain alerting systems like System_X and System_Y and sen

0 Dec 10, 2021

A software which can manage and analysis your hands played on GGPoker and Natural8

PokerManager PokerManagr is a software which can manage and analysis your hands played on GGPoker and Natural8 Related Installation Web server : Nginx

1 Apr 20, 2022

ecsk is a CLI tool to interactively use frequently used functions of docker command in Amazon ECS. (docker run, exec, cp, logs, stop)

English / 日本語 ecsk ECS + Task = ecsk 😆 ecsk is a CLI tool to interactively use frequently used functions of docker command in Amazon ECS. (docker run

114 Dec 13, 2022

A tool used for developing using Kubernetes

A tool used for developing using Kubernetes. It allows you to easily inject your own code in place of a running service.

8 Dec 10, 2022

Tool which gathers basic info from apk, which can be used for Android penetration testing.

Related tags

Overview

APKSEC

REQUIREMENTS AND INSTALLATION

Usage

Demo

Features

Todo

Credits

Notable 3rd party libraries used:

Author

You might also like...

Создание библиотеки Go для Android

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

Igo Agent is the agent of Igo, a command-line tool, through which you can quickly start Igo

Rename-pvc can rename PersistentVolumeClaims (PVCs) inside KubernetesRename-pvc can rename PersistentVolumeClaims (PVCs) inside Kubernetes

Output all versions of a local git repo, which could be used as test data for your ML program.

An Alert notification service is an application which can receive alerts from certain alerting systems like System_X and System_Y and send these alerts to developers in the form of SMS and emails.

A software which can manage and analysis your hands played on GGPoker and Natural8

ecsk is a CLI tool to interactively use frequently used functions of docker command in Amazon ECS. (docker run, exec, cp, logs, stop)

A tool used for developing using Kubernetes

Owner

Jayateertha Guruprasad

APKrash is an Android APK security analysis toolkit focused on comparing APKs to detect tampering and repackaging.

Cloud-Z gathers information and perform benchmarks on cloud instances in multiple cloud providers.

Apko: Build images for apk-based distributions declaratively

Basic Kubernetes operator that have multiple versions in CRD. This operator can be used to experiment and understand Operator/CRD behaviors.

General Pod Autoscaler(GPA) is a extension for K8s HPA, which can be used not only for serving, also for game.

This library provides a metrics package which can be used to instrument code, expose application metrics, and profile runtime performance in a flexible manner.

A penetration toolkit for container environment

CDK - Zero Dependency Container Penetration Toolkit

"go build" wrapper to add version info to Golang applications

"go build" wrapper to add version info to Golang applications