Skip to content

Te-k/apkcli

Repository files navigation

apkcli

Command line tool gathering information on APKs based on androguard.

PyPI PyPI - Downloads PyPI - License GitHub issues

Install

You can install apkcli directly from pypi : pip install apkcli

You can also install it from the source code :

git clone https://github.com/Te-k/apkcli.git
cd apkcli
pip install .

Plugins

apkcli is a CLI tool with multiple plugins :

usage: apkcli [-h]
              {arsc,cert,dex,find,frosting,info,json,manifest,permissions,shell,strings,urls,yara}
              ...

positional arguments:
  {arsc,cert,dex,find,frosting,info,json,manifest,permissions,shell,strings,urls,yara}
                        Plugins
    arsc                List strings from resource files
    cert                Show the certificate
    dex                 Extract the dex files
    enum                Enumerate interesting informations
    find                Find something in the APK
    frosting            Check if Google Play metadata (frosting) is in the APK
    func                Provides details on a function
    info                Show the certificate
    json                Extract information on the APK in JSON format
    manifest            Show the manifest
    permissions         List the permissions required by the app
    shell               Launch ipython shell to analyze the APK file
    strings             Extract strings from the DEX files
    urls                Extract URLs from the DEX files
    yara                Run a Yara run on the Dex file

optional arguments:
  -h, --help            show this help message and exit

Example :

> apkcli info 1TopSpy.apk
Metadata
================================================================================
MD5:            3018507704917c208762b69e039bdbbf
SHA1:           aebe6e49ca8522cc0e72429028492e099ddf1f44
SHA256:         5e52438f28275dc2a7e83b989e726f86ba53c915b44f126507763850197646f6
Package Name:   com.topspy.system
App:            System Services

Certificate
================================================================================
SHA1:           656CD7890ED79CE8570D1B7156C31958D5AC1606
Serial:         79667C55
Issuer:         C=US/ST=San Jose/L=CA/O=NOVABAY Solutions/OU=HelloSpy LLC/CN=John Nguyen
Subject:        C=US/ST=San Jose/L=CA/O=NOVABAY Solutions/OU=HelloSpy LLC/CN=John Nguyen
Not Before:     Oct 24 09:02:52 2017 UTC
Not After:      Oct 18 09:02:52 2042 UTC

Permissions
================================================================================
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
[SNIP]

Urls
================================================================================
https://goo.gl/NAOOOI.
https://goo.gl/NAOOOI
http://flushdata.1topspy.com
[SNIP]

License

This code is released under MIT license.