Awesome
apkcli
Command line tool gathering information on APKs based on androguard.
Install
You can install apkcli directly from pypi : pip install apkcli
You can also install it from the source code :
git clone https://github.com/Te-k/apkcli.git
cd apkcli
pip install .
Plugins
apkcli is a CLI tool with multiple plugins :
usage: apkcli [-h]
{arsc,cert,dex,find,frosting,info,json,manifest,permissions,shell,strings,urls,yara}
...
positional arguments:
{arsc,cert,dex,find,frosting,info,json,manifest,permissions,shell,strings,urls,yara}
Plugins
arsc List strings from resource files
cert Show the certificate
dex Extract the dex files
enum Enumerate interesting informations
find Find something in the APK
frosting Check if Google Play metadata (frosting) is in the APK
func Provides details on a function
info Show the certificate
json Extract information on the APK in JSON format
manifest Show the manifest
permissions List the permissions required by the app
shell Launch ipython shell to analyze the APK file
strings Extract strings from the DEX files
urls Extract URLs from the DEX files
yara Run a Yara run on the Dex file
optional arguments:
-h, --help show this help message and exit
Example :
> apkcli info 1TopSpy.apk
Metadata
================================================================================
MD5: 3018507704917c208762b69e039bdbbf
SHA1: aebe6e49ca8522cc0e72429028492e099ddf1f44
SHA256: 5e52438f28275dc2a7e83b989e726f86ba53c915b44f126507763850197646f6
Package Name: com.topspy.system
App: System Services
Certificate
================================================================================
SHA1: 656CD7890ED79CE8570D1B7156C31958D5AC1606
Serial: 79667C55
Issuer: C=US/ST=San Jose/L=CA/O=NOVABAY Solutions/OU=HelloSpy LLC/CN=John Nguyen
Subject: C=US/ST=San Jose/L=CA/O=NOVABAY Solutions/OU=HelloSpy LLC/CN=John Nguyen
Not Before: Oct 24 09:02:52 2017 UTC
Not After: Oct 18 09:02:52 2042 UTC
Permissions
================================================================================
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
[SNIP]
Urls
================================================================================
https://goo.gl/NAOOOI.
https://goo.gl/NAOOOI
http://flushdata.1topspy.com
[SNIP]
License
This code is released under MIT license.