{"id":15111131,"url":"https://github.com/andpalmier/apkingo","last_synced_at":"2026-04-02T14:04:01.738Z","repository":{"id":56850215,"uuid":"441135484","full_name":"andpalmier/apkingo","owner":"andpalmier","description":"extract info from apk files","archived":false,"fork":false,"pushed_at":"2026-03-26T16:42:57.000Z","size":49196,"stargazers_count":85,"open_issues_count":1,"forks_count":11,"subscribers_count":2,"default_branch":"main","last_synced_at":"2026-03-27T06:29:36.948Z","etag":null,"topics":["android","android-application","android-malware-analysis","android-malware-detection","apk","apk-analysis","mobile-security","scanning-apk"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/andpalmier.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-12-23T09:54:44.000Z","updated_at":"2026-03-26T16:42:56.000Z","dependencies_parsed_at":"2024-04-30T09:57:17.540Z","dependency_job_id":"62ddbc7a-3654-4cbb-9f59-0d8394501d71","html_url":"https://github.com/andpalmier/apkingo","commit_stats":null,"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/andpalmier/apkingo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/andpalmier%2Fapkingo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/andpalmier%2Fapkingo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/andpalmier%2Fapkingo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/andpalmier%2Fapkingo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/andpalmier","download_url":"https://codeload.github.com/andpalmier/apkingo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/andpalmier%2Fapkingo/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31307467,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-02T12:59:32.332Z","status":"ssl_error","status_checked_at":"2026-04-02T12:54:48.875Z","response_time":89,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","android-application","android-malware-analysis","android-malware-detection","apk","apk-analysis","mobile-security","scanning-apk"],"created_at":"2024-09-26T00:01:49.060Z","updated_at":"2026-04-02T14:04:01.724Z","avatar_url":"https://github.com/andpalmier.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# apkingo\n\n\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"apkingo\" src=\"https://github.com/andpalmier/apkingo/blob/main/img/apkingo.png?raw=true\" width=\"400\" /\u003e\n  \u003cp align=\"center\"\u003e\n    \u003ca href=\"https://github.com/andpalmier/apkingo/blob/main/LICENSE\"\u003e\u003cimg alt=\"Software License\" src=\"https://img.shields.io/badge/License-Apache%202.0-blue.svg\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://godoc.org/github.com/andpalmier/apkingo\"\u003e\u003cimg alt=\"GoDoc Card\" src=\"https://godoc.org/github.com/andpalmier/apkingo?status.svg\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://goreportcard.com/report/github.com/andpalmier/apkingo\"\u003e\u003cimg alt=\"Go Report Card\" src=\"https://goreportcard.com/badge/github.com/andpalmier/apkingo?style=flat-square\"\u003e\u003c/a\u003e\n    \u003ca href=\"https://x.com/intent/follow?screen_name=andpalmier\"\u003e\u003cimg src=\"https://img.shields.io/twitter/follow/andpalmier?style=social\u0026logo=x\" alt=\"follow on X\"\u003e\u003c/a\u003e\n  \u003c/p\u003e\n\u003c/p\u003e\n\n\u003e **apkingo** is an APK analysis tool written in Go. It extracts information from Android applications, such as permissions, metadata, certificate details, and integrates with VirusTotal and Koodous for malware detection.\n\n## Features\n\n### Core Analysis\n- **General Info**: Package name, version, main activity, SDK versions\n- **Hashes**: MD5, SHA1, SHA256\n- **Permissions**: Complete list of requested permissions\n- **Metadata**: Application metadata\n- **Certificate**: Serial, thumbprint, validity, issuer, subject\n\n### File Format Support\n- **XAPK/APKS Support**: Automatically detects and extracts APKs from Android App Bundle archives\n- **Directory Analysis**: Batch analyze multiple APKs in a directory with the `-dir` flag\n\n### External Intelligence\n- **Play Store Integration**: Scrapes application info from Google Play Store\n- **VirusTotal Analysis** (requires VirusTotal API key):\n  - Malware detection stats with highlighted red flags\n  - Popular threat classification (e.g., \"trojan.pegasus/chrysaor\")\n  - File reputation score\n  - Community detection (Sigma, YARA, IDS)\n  - File tags and characteristics\n- **VirusTotal Androguard** (automatic with VirusTotal API key):\n  - Complete APK structure analysis\n  - Activities, Services, Providers, Receivers\n  - Libraries and SDK versions\n  - Dangerous permissions highlighted in red\n- **Koodous Integration** (requires Koodous API key):\n  - Malware detection status\n  - Community rating and trust score\n  - Positive/Negative votes\n  - Repository information when available\n\n### Output \u0026 Export\n- **Enhanced Terminal Output**: Colored results with **bold red warnings** for malware indicators\n- **JSON Export**: Pretty-printed analysis export including all VirusTotal/Koodous data\n\n## Installation\n\n### From GitHub Releases\n\nDownload the pre-compiled binary for your system from the [Releases](https://github.com/andpalmier/apkingo/releases) page.\n\n### From Source\n\n```bash\ngo install github.com/andpalmier/apkingo/cmd/apkingo@latest\n```\n\n### From Homebrew\n\n```bash\nbrew tap andpalmier/tap\nbrew install apkingo\n```\n\n## Usage\n\n### Using Docker (Recommended)\n\nYou can run **apkingo** directly using Docker without installing Go or downloading binaries.\n\n```bash\n# Analyze an APK (mount the directory containing the APK)\ndocker run --rm -v $(pwd):/mnt ghcr.io/andpalmier/apkingo -apk /mnt/target.apk\n\n# Analyze an XAPK file\ndocker run --rm -v $(pwd):/mnt ghcr.io/andpalmier/apkingo -apk /mnt/app.xapk\n\n# Analyze all APKs in a directory\ndocker run --rm -v $(pwd):/mnt ghcr.io/andpalmier/apkingo -dir /mnt\n\n# Analyze and export JSON report\ndocker run --rm -v $(pwd):/mnt ghcr.io/andpalmier/apkingo -apk /mnt/target.apk -json /mnt/report.json\n```\n\n### CLI Usage\n\n```bash\n# Analyze a single APK\napkingo -apk \u003cpath_to_apk\u003e\n\n# Analyze an XAPK/APKS file\napkingo -apk \u003cpath_to_xapk\u003e\n\n# Analyze all APKs in a directory\napkingo -dir \u003cpath_to_directory\u003e\n\n# Analyze with API keys and export JSON\napkingo -apk \u003cpath_to_apk\u003e -vtapi \u003cVT_KEY\u003e -kapi \u003cKOODOUS_KEY\u003e -json report.json\n```\n\n### API Keys\n\nFor enhanced analysis, you can provide API keys for VirusTotal and Koodous either via command-line flags or environment variables:\n\n**Environment Variables (Recommended):**\n```bash\nexport VT_API_KEY=\"your_virustotal_api_key\"\nexport KOODOUS_API_KEY=\"your_koodous_api_key\"\napkingo -apk \u003cpath_to_apk\u003e\n```\n\n**Command-Line Flags:**\n```bash\napkingo -apk \u003cpath_to_apk\u003e -vtapi \u003cYOUR_VT_KEY\u003e -kapi \u003cYOUR_KOODOUS_KEY\u003e\n```\n\n### Options\n\n| Flag | Description |\n|------|-------------|\n| `-apk` | Path to APK or XAPK file to analyze (required) |\n| `-dir` | Analyze all APKs in a directory |\n| `-json` | Path to export analysis in JSON format |\n| `-country` | Country code of the Play Store (default: \"us\") |\n| `-vtapi` | VirusTotal API key (can also use `VT_API_KEY` env var) |\n| `-kapi` | Koodous API key (can also use `KOODOUS_API_KEY` env var) |\n| `-vtupload` | Upload the APK to VirusTotal after analysis (interactive prompt) |\n\n### Example\n\n```bash\napkingo -apk \u003cpath_to_apk\u003e\n```\n\n## Screenshot\n\napkingo analyzing an Android malware:\n\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"apkingo\" src=\"https://github.com/andpalmier/apkingo/blob/main/img/screen_malware.png?raw=true\" /\u003e\n\u003c/p\u003e\n\n## 3rd party libraries and API documentation \n\n- shogo82148/androidbinary: [GitHub repo](https://github.com/shogo82148/androidbinary) and [Go reference](https://pkg.go.dev/github.com/shogo82148/androidbinary)\n- avast/apkverifier: [GitHub repo](https://github.com/avast/apkverifier) and [Go reference](https://pkg.go.dev/github.com/avast/apkverifier)\n- fatih/color: [GitHub repo](https://github.com/fatih/color) and [Go reference](https://pkg.go.dev/github.com/fatih/color)\n- n0madic/google-play-scraper: [GitHub repo](https://github.com/n0madic/google-play-scraper) and [Go reference](https://pkg.go.dev/github.com/n0madic/google-play-scraper)\n- parnurzeal/gorequest: [GitHub repo](https://github.com/parnurzeal/gorequest) and [Go reference](https://pkg.go.dev/github.com/parnurzeal/gorequest)\n- VirusTotal/vt-go: [GitHub repo](https://github.com/VirusTotal/vt-go) and [Go reference](https://pkg.go.dev/github.com/VirusTotal/vt-go)\n- [VirusTotal API documentation](https://docs.virustotal.com/reference/overview)\n- [Koodous API documentation](https://docs.koodous.com/api/apks.html)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fandpalmier%2Fapkingo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fandpalmier%2Fapkingo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fandpalmier%2Fapkingo/lists"}