Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/ac-pm/inspeckage
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
https://github.com/ac-pm/inspeckage
android-application dynamic-analysis security-analysis xposed
Last synced: about 1 month ago
JSON representation
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- Host: GitHub
- URL: https://github.com/ac-pm/inspeckage
- Owner: ac-pm
- License: apache-2.0
- Created: 2016-02-28T22:59:51.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2020-09-22T01:45:56.000Z (about 4 years ago)
- Last Synced: 2024-10-14T10:41:42.691Z (about 1 month ago)
- Topics: android-application, dynamic-analysis, security-analysis, xposed
- Language: Java
- Homepage:
- Size: 19.7 MB
- Stars: 2,809
- Watchers: 119
- Forks: 517
- Open Issues: 54
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG
- License: LICENSE
Awesome Lists containing this project
README
# 
Inspeckage - Android Package Inspector
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime.
* http://ac-pm.github.io/Inspeckage
* https://twitter.com/inspeckage
* https://play.google.com/store/apps/details?id=mobi.acpm.inspeckage
* http://repo.xposed.info/module/mobi.acpm.inspeckage
Features
---------------
With Inspeckage, we can get a good amount of information about the application's behavior:
#### Information gathering
* Requested Permissions;
* App Permissions;
* Shared Libraries;
* Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;
* Check if the app is debuggable or not;
* Version, UID and GIDs;
* etc.
#### Hooks (so far)
With the hooks, we can see what the application is doing in real time:
* Shared Preferences (log and file);
* Serialization;
* Crypto;
* Hashes;
* SQLite;
* HTTP (an HTTP proxy tool is still the best alternative);
* File System;
* Miscellaneous (Clipboard, URL.Parse());
* WebView;
* IPC;
* + Hooks (add new hooks dynamically)
#### Actions
With Xposed it's possible to perform actions such as start a unexported activity and much else:
* Start any activity (exported and unexported);
* Call any provider (exported and unexported);
* Disable FLAG_SECURE;
* SSL uncheck (bypass certificate pinning - JSSE, Apache and okhttp3);
* Start, stop and restart the application;
* Replace params and return value (+Hooks tab).
#### Fingerprint
* Device fingerprint - advertising id, MAC address, IMEI, release, brand, build mode...
#### Location
* Change GPS location (without use "Mock location" functionality)
#### Extras
* APK Download;
* View the app's directory tree;
* Download the app's files;
* Download the output generated by hooks in text file format;
* Take a screen capture;
* Send text to android clipboard.
* Tips - some howto/guide
#### Configuration
Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app's traffic. With Inspeckage, you can:
* Add a proxy to the target app;
* Enable and disable proxy;
* Add entries in the arp table.
#### Logcat
Logcat.html page. A experimental page with websocket to show some information from the logcat.
Installation
---------------
Requirements:
Xposed Framework
##### Xposed Installer
1. Go to Xposed Installer, select "Download"
2. Refresh and search for "Inspeckage"
3. Download the latest version and install
4. Enable it in Xposed
5. Reboot and enjoy!
##### Xposed Repository
Get it from Xposed repo: http://repo.xposed.info/module/mobi.acpm.inspeckage
adb install mobi.acpm.inspeckage.apk
1. Enable it in Xposed
2. Reboot and enjoy!
##### From Source
Feel free to download the source!
### How to uninstall
adb uninstall mobi.acpm.inspeckage
And reboot!
## Genymotion
[](https://vimeo.com/156745941)
### Screenshots
License
-------
Copyright 2016 ac-pm
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.