All Projects → ac-pm → Inspeckage

ac-pm / Inspeckage

Licence: apache-2.0
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

Programming Languages

java
68154 projects - #9 most used programming language
HTML
75241 projects
javascript
184084 projects - #8 most used programming language
CSS
56736 projects

Projects that are alternatives of or similar to Inspeckage

Edxposedmanager
Companion Android application for EdXposed
Stars: ✭ 1,172 (-47.89%)
Mutual labels:  xposed, android-application
Mobileapp Pentest Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
Stars: ✭ 3,051 (+35.66%)
Mutual labels:  dynamic-analysis, android-application
Coronavirus Tracker
An Android Application written in Kotlin 📱 with MVVM Architecture using latest Android Development tools like Dagger2, Room, ViewModel, LiveData, Retrofit and Coroutines to display CoVID-19 Data
Stars: ✭ 156 (-93.06%)
Mutual labels:  android-application
Munch
[Deprecated] A minimalistic Rss Reader for Android devices
Stars: ✭ 171 (-92.4%)
Mutual labels:  android-application
Stepik Android
Android Application for Taking Open Courses on the Stepik Platform
Stars: ✭ 165 (-92.66%)
Mutual labels:  android-application
Ankihelper
Stars: ✭ 159 (-92.93%)
Mutual labels:  android-application
R2frida Wiki
This repo aims at providing practical examples on how to use r2frida
Stars: ✭ 168 (-92.53%)
Mutual labels:  dynamic-analysis
Mifos Mobile
Repository for the Mifos Mobile Banking App for clients
Stars: ✭ 154 (-93.15%)
Mutual labels:  android-application
Xposedchecker
[Deprecated] Check whether your xposed has been enabled.
Stars: ✭ 173 (-92.31%)
Mutual labels:  xposed
Paginglibrary Sample
An open source app that is refactored to demo Paging Library from Android Jetpack
Stars: ✭ 165 (-92.66%)
Mutual labels:  android-application
Pine
Dynamic java method hook framework on ART.
Stars: ✭ 171 (-92.4%)
Mutual labels:  xposed
Posidonlauncher
a one-page homescreen with a news feed
Stars: ✭ 163 (-92.75%)
Mutual labels:  android-application
Lookatme
VideoView that plays video only when 👀 are open and 👦 is detected with various other features
Stars: ✭ 161 (-92.84%)
Mutual labels:  android-application
Ulogger Android
μlogger • android application for real-time collection and publishing of geolocation data
Stars: ✭ 168 (-92.53%)
Mutual labels:  android-application
Android Ui 2019
Android Library 2019 Loading.....
Stars: ✭ 159 (-92.93%)
Mutual labels:  android-application
Yalpstore
Download apks from Google Play Store
Stars: ✭ 2,088 (-7.16%)
Mutual labels:  android-application
Virtualxposed
A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
Stars: ✭ 12,648 (+462.38%)
Mutual labels:  xposed
Videorecord
最全的懒人视频拍摄,支持横屏拍摄效果与竖屏拍摄效果,闪光灯,切换前后摄像头,懒人视频拍摄Demo,继承预览。简书:
Stars: ✭ 162 (-92.8%)
Mutual labels:  android-application
Dreamland
A third-party Xposed framework implementation, supports Android 7~11.
Stars: ✭ 161 (-92.84%)
Mutual labels:  xposed
Droid Feed
Aggregated Android news, articles, podcasts and conferences about Android Development
Stars: ✭ 174 (-92.26%)
Mutual labels:  android-application

Inspeckage - Android Package Inspector

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime.

Features

With Inspeckage, we can get a good amount of information about the application's behavior:

Information gathering

  • Requested Permissions;
  • App Permissions;
  • Shared Libraries;
  • Exported and Non-exported Activities, Content Providers,Broadcast Receivers and Services;
  • Check if the app is debuggable or not;
  • Version, UID and GIDs;
  • etc.

Hooks (so far)

With the hooks, we can see what the application is doing in real time:

  • Shared Preferences (log and file);
  • Serialization;
  • Crypto;
  • Hashes;
  • SQLite;
  • HTTP (an HTTP proxy tool is still the best alternative);
  • File System;
  • Miscellaneous (Clipboard, URL.Parse());
  • WebView;
  • IPC;
    • Hooks (add new hooks dynamically)

Actions

With Xposed it's possible to perform actions such as start a unexported activity and much else:

  • Start any activity (exported and unexported);
  • Call any provider (exported and unexported);
  • Disable FLAG_SECURE;
  • SSL uncheck (bypass certificate pinning - JSSE, Apache and okhttp3);
  • Start, stop and restart the application;
  • Replace params and return value (+Hooks tab).

Fingerprint

  • Device fingerprint - advertising id, MAC address, IMEI, release, brand, build mode...

Location

  • Change GPS location (without use "Mock location" functionality)

Extras

  • APK Download;
  • View the app's directory tree;
  • Download the app's files;
  • Download the output generated by hooks in text file format;
  • Take a screen capture;
  • Send text to android clipboard.
  • Tips - some howto/guide

Configuration

Even though our tool has some hooks to the HTTP libraries, using an external proxy tool is still the best option to analyze the app's traffic. With Inspeckage, you can:

  • Add a proxy to the target app;
  • Enable and disable proxy;
  • Add entries in the arp table.

Logcat

Logcat.html page. A experimental page with websocket to show some information from the logcat.

Installation

Requirements: Xposed Framework

Xposed Installer
  1. Go to Xposed Installer, select "Download"
  2. Refresh and search for "Inspeckage"
  3. Download the latest version and install
  4. Enable it in Xposed
  5. Reboot and enjoy!
Xposed Repository

Get it from Xposed repo: http://repo.xposed.info/module/mobi.acpm.inspeckage

    adb install mobi.acpm.inspeckage.apk
  1. Enable it in Xposed
  2. Reboot and enjoy!
From Source

Feel free to download the source!

How to uninstall

    adb uninstall mobi.acpm.inspeckage

And reboot!

Genymotion

Genymotion

Screenshots

License

Copyright 2016 ac-pm

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].