An open API service indexing awesome lists of open source software.

https://github.com/puddly/android-otp-extractor

Extracts OTP tokens from rooted Android devices
https://github.com/puddly/android-otp-extractor

adb android extraction otp python totp

Last synced: 6 months ago
JSON representation

Extracts OTP tokens from rooted Android devices

Awesome Lists containing this project

README

          

# Android OTP Extractor

Many OTP apps don't support exporting or backing up their OTP secrets. Switching apps would require you to regenerate all of your tokens, which can be tedious if you have a lot. This application can extract your tokens from popular Android OTP apps and export them in a standard format or just display them as QR codes for easy importing.

## Supports

- Google Authenticator
- Microsoft Authenticator
- Authy
- Duo Mobile
- FreeOTP and FreeOTP+
- Steam Authenticator
- AndOTP (when backups are enabled)
- Aegis
- Battle.net Authenticator
- Authenticator Plus

## Installation

```bash
$ pip install git+https://github.com/puddly/android-otp-extractor
$ python -m android_otp_extractor
```

## Usage

Requires Python 3.6+ and a **rooted** Android phone.

```
usage: python -m android_otp_extractor [-h]
[--include {authy,freeotp,freeotp_plus,duo,google_authenticator,microsoft_authenticator,andotp,steam_authenticator,battlenet_authenticator,aegis,authenticator_plus} | --exclude {authy,freeotp,freeotp_plus,duo,google_authenticator,microsoft_authenticator,andotp,steam_authenticator,battlenet_authenticator,aegis,authenticator_plus}]
[--data DATA]
[--busybox-path BUSYBOX_PATH]
[--no-show-qr] [--prepend-issuer]
[--andotp-backup ANDOTP_BACKUP] [-v]

Extracts TOTP secrets from a rooted Android phone.

optional arguments:
-h, --help show this help message and exit
--include {authy,freeotp,freeotp_plus,duo,google_authenticator,microsoft_authenticator,andotp,steam_authenticator,battlenet_authenticator,aegis,authenticator_plus}
only export secrets from this app. Can be specified
multiple times. (default: None)
--exclude {authy,freeotp,freeotp_plus,duo,google_authenticator,microsoft_authenticator,andotp,steam_authenticator,battlenet_authenticator,aegis,authenticator_plus}
do not export secrets from this app. Can be specified
multiple times. (default: None)
--data DATA path to the app data folder (default:
$ANDROID_DATA/data)
--busybox-path BUSYBOX_PATH
path to {Busy,Toy}box supporting base64 and ls
(default: None)
--no-show-qr do not display the accounts as a local webpage with
scannable QR codes (default: False)
--prepend-issuer adds the issuer to the token name (default: False)
--andotp-backup ANDOTP_BACKUP
saves the accounts as an AndOTP backup file (default:
None)
-v, --verbose increases verbosity (default: 0)
```

The default action is to extract everything and display QR codes locally in your webbrowser. Export them as an AndOTP backup file with `--andotp-backup filename.json`.