#apk analysis

[securify]

DroidCarve is capable of analyzing an Android APK file and automate certain reverse engineering tasks. Features: + Code disassembling into Smali bytecode. + APK signature extraction. + AndroidManifest parsing: permissions, services, intents, package information etc.

[securify]

+ droidstatx is a Python tool that generates an Xmind map with all the information gathered and any evidence of possible vulnerabilities identified via static analysis. + The map itself is an Android Application Pentesting Methodology component, which assists Pentesters to cover all important areas during an assessment. This was the main goal driving the tool development. + The tool also allows to add custom checks in a simple way, to confirm the existence of those patterns in the dalvik bytecode instructions.